Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-31863

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00388EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 3:35 a.m.8 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS7.2AI score0.00388EPSS
Exploits0References1
OSV
OSV
added 2023/03/24 4:15 p.m.2 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS5.8AI score0.00388EPSS
Exploits0References3
NVD
NVD
added 2023/03/24 4:15 p.m.10 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS6.5AI score0.00388EPSS
Exploits0References3
Prion
Prion
added 2023/03/24 4:15 p.m.7 views

Xxe

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

7.5CVSS9.3AI score0.00388EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.7 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.5AI score0.00388EPSS
Exploits0References3
CVE
CVE
added 2023/03/24 12:0 a.m.40 views

CVE-2023-28152

Independentsoft JWord before 1.1.110 is affected by an XML External Entity (XXE) injection via a remote DTD in a DOCX file. The.Root cause is an XXE vulnerability in the API that parses DOCX content, enabling unauthorized data access or manipulation. Impact in the NVD listing shows high severity ...

9.8CVSS9.3AI score0.00388EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/03/24 12:0 a.m.2 views

Independentsoft JWord 代码问题漏洞

Independentsoft JWord is a Microsoft Word-compatible API for Java and Android from Independentsoft, Germany. A security vulnerability exists in Independentsoft JWord versions prior to 1.1.110, which stems from the API's susceptibility to XML External Entity XXE injection via a remote DTD in a DOC...

9.8CVSS8.4AI score0.00388EPSS
Exploits0References3
Rows per page
Query Builder