Lucene search
+L

6 matches found

Mend
Mend
•added 2026/08/21 9:52 a.m.•5 views

CVE-2026-47079

Inappropriate Encoding for Output Context vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...

4.3CVSS5.8AI score0.00189EPSS
SaveExploits0References10
Mend
Mend
•added 2026/08/21 9:51 a.m.•9 views

CVE-2026-48590

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

4.3CVSS6AI score0.00222EPSS
SaveExploits0References10
Mend
Mend
•added 2026/08/21 9:49 a.m.•9 views

CVE-2026-47080

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...

4.3CVSS6.1AI score0.00222EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•7 views

CVE-2026-48590: XML Injection (aka Blind XPath Injection)

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

2.1CVSS6AI score0.00222EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•11 views

CVE-2026-47080: XML Injection (aka Blind XPath Injection)

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...

2.1CVSS6.1AI score0.00222EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•9 views

CVE-2026-47079: Inappropriate Encoding for Output Context

Inappropriate Encoding for Output Context vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...

2.1CVSS5.8AI score0.00189EPSS
SaveExploits0References2
Rows per page
Query Builder