Lucene search
K

18 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2016-3720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impa...

9.8CVSS6.9AI score0.00227EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:4 a.m.1 views

SUSE CVE-2016-3720

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS8.2AI score0.00227EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2016-0175)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.00227EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.100 views

Fedora Update for jackson-dataformat-xml FEDORA-2019-df57551f6d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS8.7AI score0.14845EPSS
Exploits1References2
vulnersOsv
vulnersOsv
added 2018/10/18 5:43 p.m.0 views

aero.loretta:sdk-api-client (>=1.0.0 <=1.0.3), ai.entrolution:thylacine_2.13 (>=0.11.0 <=0.16.0) +9889 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-RC2 <=2.7.7)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-RC2, =1.0.0, =0.11.0, =0.13.0, =0.5.1, =0.5.1, =0.5.1, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.10.0 and more Source cves: CVE-2016-7051 Source advisory: OSV:GHSA-7C2R-3JQF-C9RW...

8.6CVSS7.2AI score0.00918EPSS
Exploits0
OSV
OSV
added 2018/10/18 5:43 p.m.2 views

GHSA-7C2R-3JQF-C9RW jackson-dataformat-xml vulnerable to server side request forgery (SSRF)

Versions of jackson-dataformat-xml prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

8.6CVSS7.2AI score0.00918EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2018/10/18 5:43 p.m.47 views

jackson-dataformat-xml vulnerable to server side request forgery (SSRF)

Versions of jackson-dataformat-xml prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

8.6CVSS6.3AI score0.00918EPSS
Exploits0References5Affected Software1
vulnersOsv
vulnersOsv
added 2018/10/18 5:43 p.m.1 views

aero.loretta:sdk-api-client (>=1.0.0 <=1.0.3), ai.entrolution:thylacine_2.13 (>=0.11.0 <=0.16.0) +9867 more potentially affected by CVE-2016-3720 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-RC2 <=2.7.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-RC2, =1.0.0, =0.11.0, =0.13.0, =0.5.1, =0.5.1, =0.5.1, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.10.0 and more Source cves: CVE-2016-3720 Source advisory: OSV:GHSA-HMQ6-FRV3-4727...

9.8CVSS6.8AI score0.00227EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/07/14 12:0 a.m.34 views

Fedora 22 : jackson-dataformat-xml (2016-d708261ce2)

Security fix for CVE-2016-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

9.8CVSS6.8AI score0.00227EPSS
Exploits0References2
Prion
Prion
added 2016/06/10 3:59 p.m.29 views

Xxe

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

7.5CVSS7.1AI score0.00227EPSS
Exploits0References1Affected Software2
Debian CVE
Debian CVE
added 2016/06/10 3:0 p.m.35 views

CVE-2016-3720

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7.1AI score0.00227EPSS
Exploits0
CVE
CVE
added 2016/06/10 3:0 p.m.186 views

CVE-2016-3720

CVE-2016-3720 describes an XML External Entity (XXE) vulnerability in Jackson’s Data format extension, jackson-dataformat-xml, specifically in XmlMapper. The connected documents corroborate a related XXE issue affecting jackson-mapper-asl and related Codehaus Jackson libraries, and reference warn...

9.8CVSS8.5AI score0.00227EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2016/06/08 12:0 a.m.26 views

Fedora Update for jackson-dataformat-xml FEDORA-2016-d708261ce2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.00227EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/06/08 12:0 a.m.36 views

Fedora Update for jackson-dataformat-xml FEDORA-2016-f2e2b178ea

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.00227EPSS
Exploits0References2
Mageia
Mageia
added 2016/05/13 9:54 p.m.62 views

Updated jackson-dataformat-xml packages fix CVE-2016-3720

Updated jackson-dataformat-xml packages fix security vulnerability: It was reported that XmlMapper in jackson-dataformat-xml is vulnerable to XXE attack "Improper Restriction of XML External Entity Reference" CVE-2016-3720...

9.8CVSS2.8AI score0.00227EPSS
Exploits0References2
OSV
OSV
added 2016/05/13 9:54 p.m.9 views

MGASA-2016-0175 Updated jackson-dataformat-xml packages fix CVE-2016-3720

Updated jackson-dataformat-xml packages fix security vulnerability: It was reported that XmlMapper in jackson-dataformat-xml is vulnerable to XXE attack "Improper Restriction of XML External Entity Reference" CVE-2016-3720...

9.8CVSS8.6AI score0.00227EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/05/12 12:0 a.m.31 views

Fedora 24 : jackson-dataformat-xml-2.6.3-3.fc24 (2016-13b4cae9df)

Security fix for CVE-2016-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

9.8CVSS6.8AI score0.00227EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2016/05/11 12:0 a.m.33 views

Fedora Update for jackson-dataformat-xml FEDORA-2016-13

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.00227EPSS
Exploits0References2
Rows per page
Query Builder