Lucene search
+L

10021 matches found

Github Security Blog
Github Security Blog
added 2023/01/07 9:30 p.m.23 views

kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The name of...

9.8CVSS9.2AI score0.00804EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/01/07 9:30 p.m.33 views

GHSA-RH3M-PR36-XH2F kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The name of...

9.8CVSS7.6AI score0.00804EPSS
SaveExploits0References6
NVD
NVD
added 2023/01/07 8:15 p.m.21 views

CVE-2015-10029

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

9.8CVSS6.7AI score0.00804EPSS
SaveExploits0References4
Prion
Prion
added 2023/01/07 8:15 p.m.18 views

Xxe

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

7.5CVSS7.2AI score0.00804EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/07 7:36 p.m.28 views

CVE-2015-10029 kelvinmo simplexrd simplexrd.class.php xml external entity reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

5.5CVSS9.7AI score0.00804EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/01/07 12:0 a.m.10 views

simplexrd 代码问题漏洞

simplexrd is a very simple XRD document parser by Kelvin Mo, a personal developer. A code issue vulnerability exists in versions of simplexrd prior to 3.1.1, which stems from a problem with unknown code in the file simplexrd/simplexrd.class.php, which can lead to xml external entity references...

9.8CVSS6.5AI score0.00804EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/01/07 12:0 a.m.12 views

PT-2023-10208 · Kelvinmo · Simplexrd

Name of the Vulnerable Software and Affected Versions: kelvinmo simplexrd versions up to 3.1.0 Description: A vulnerability was found in the file simplexrd/simplexrd.class.php, which leads to xml external entity reference. This issue affects unknown code and can be addressed by upgrading to versi...

9.8CVSS5.8AI score0.00804EPSS
SaveExploits0References9
OSV
OSV
added 2023/01/06 12:31 p.m.18 views

GHSA-77CC-W3WM-6WHP dssp vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS9.6AI score0.00731EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/06 10:15 a.m.23 views

CVE-2016-15011

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS9.6AI score
SaveExploits0References4
Prion
Prion
added 2023/01/06 10:15 a.m.16 views

Xxe

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

7.5CVSS7.1AI score0.00731EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/06 9:46 a.m.19 views

CVE-2016-15011 e-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

5.5CVSS9.6AI score0.00731EPSS
SaveExploits0References4
CVE
CVE
added 2023/01/06 9:46 a.m.68 views

CVE-2016-15011

The CVE-2016-15011 issue affects e-Contract dssp up to 1.3.1, specifically the function checkSignResponse in dssp-client/src/main/java/be/e_contract/dssp/client/SignResponseVerifier.java. The root cause is a vulnerability leading to XML External Entity (XXE) reference. A fix is available in dssp ...

9.8CVSS7.5AI score0.00731EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/01/06 12:0 a.m.8 views

Digital Signature Service Protocol 代码问题漏洞

Digital Signature Service Protocol is an e-Contract.be open source library . Digital Signature Service Protocol provides a specification and Java reference implementation for the Digital Signature Service Protocol. Digital Signature Service Protocol versions prior to 1.3.2 there is a code problem...

9.8CVSS6.4AI score0.00731EPSS
SaveExploits0References6
GitLab Advisory Database
GitLab Advisory Database
added 2023/01/06 12:0 a.m.25 views

Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS3.2AI score0.00731EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:0 a.m.21 views

EulerOS 2.0 SP9 : expat (EulerOS-SA-2023-1098)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in...

7.5CVSS7.2AI score0.02324EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2023/01/05 12:30 p.m.26 views

aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

9.8CVSS9AI score0.00845EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2023/01/05 12:30 p.m.58 views

GHSA-G4R8-28FP-F255 aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

9.8CVSS5.1AI score0.00845EPSS
SaveExploits0References8
OSV
OSV
added 2023/01/05 12:15 p.m.20 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS9.6AI score
SaveExploits0References4
NVD
NVD
added 2023/01/05 12:15 p.m.31 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS7.5AI score0.00845EPSS
SaveExploits0References4
Prion
Prion
added 2023/01/05 12:15 p.m.19 views

Xxe

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

7.5CVSS9.5AI score0.00845EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder