Lucene search
+L

7 matches found

NVD
NVD
•added 2024/11/11 7:15 p.m.•24 views

CVE-2024-51135

An XML External Entity XXE vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS0.01043EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/11/11 12:00 a.m.•29 views

CVE-2024-51135

An XML External Entity XXE vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

0.01043EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/11 12:00 a.m.•60 views

CVE-2024-51135

The powertac-server v1.9.0 software is vulnerable to an XML External Entity (XXE) injection flaw within the DocumentBuilderFactory component. This vulnerability stems from improper input validation , which allows an attacker to submit a crafted request containing malicious XML entities. Successfu...

9.8CVSS7.4AI score0.01043EPSS
SaveExploits0References4
NVD
NVD
•added 2024/11/05 5:15 p.m.•24 views

CVE-2024-51132

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS0.01904EPSS
SaveExploits1References2
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/05 12:00 a.m.•43 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/05 12:00 a.m.•30 views

CVE-2024-51132

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

7.2AI score0.01904EPSS
SaveExploits1References2
Atlassian
Atlassian
•added 2014/06/24 5:47 a.m.•43 views

Remote DoS Exploit on JIRA

An attacker is able to perform the billion laughs attack on a default JIRA installation including OnDemand installations. This attack can be executed without authentication and leads to the complete use of resources on the victim machine causing the server to crash or hang. It is possible due to...

0.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder