Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-1420

Malicious code in bioql PyPI...

9.1CVSS9.1AI score0.01068EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2025/05/22 9:19 p.m.8 views

CVE-2021-23901

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1CVSS6.7AI score0.01068EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.2 views

SUSE CVE-2021-23901

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1CVSS7.3AI score0.01068EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/03/18 5:46 p.m.31 views

XML external entity (XXE) injection in Apache Nutch

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1CVSS4.8AI score0.01068EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/03/18 5:46 p.m.21 views

GHSA-FXHP-WRW9-3R97 XML external entity (XXE) injection in Apache Nutch

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1CVSS8.9AI score0.01068EPSS
Exploits0References7
vulnersOsv
vulnersOsv
added 2022/01/06 6:37 p.m.1 views

com.kumuluz.ee:kumuluzee-jax-ws-cxf (>=2.6.0 <=3.12.2), net.kieker-monitoring:analysis (>=2.0.0 <=2.0.3) +1 more potentially affected by CVE-2021-30468 via org.apache.cxf:cxf (>=2.7.18 <=3.2.6)

org.apache.cxf:cxf MAVEN version =2.7.18, =2.6.0, =2.0.0, =2.0.3 - org.apache.nutch:nutch =1.10 Source cves: CVE-2021-30468 Source advisory: OSV:GHSA-G23V-P5JQ-JVH4...

7.5CVSS6.7AI score0.01898EPSS
Exploits0
OSV
OSV
added 2021/02/08 9:30 a.m.5 views

SUSE-SU-2021:0323-1 Security update for nutch-core

This update for nutch-core fixes the following issue: - CVE-2021-23901: fixed an XML external entity XXE injection in DmozParser bsc1181356...

9.1CVSS9.4AI score0.01068EPSS
Exploits0References3
CNVD
CNVD
added 2021/01/27 12:0 a.m.9 views

Apache Nutch XML External Entity Injection Vulnerability

Apache Nutch is a Java-based scalable crawler software from the Apache Foundation. Versions of Apache Nutch prior to 1.18 suffer from an XML external entity injection vulnerability that allows an attacker to view files on the application server file system and interact with any backend or externa...

9.1CVSS6.9AI score0.01068EPSS
Exploits0References1
Veracode
Veracode
added 2021/01/26 5:33 a.m.20 views

XML External Entity (XXE)

nutch is vulnerable to XML external entity XXE attacks. The external DTDs is enabled by default and allows an attacker to perform server-side request forgery attacks, obtain system files and internal resources via a malicious Dmoz document...

9.1CVSS4.1AI score0.01068EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2021/01/25 10:16 a.m.17 views

CVE-2021-23901

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1CVSS8.9AI score0.01068EPSS
Exploits0References5
OSV
OSV
added 2021/01/25 10:16 a.m.3 views

CVE-2021-23901

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1CVSS7.3AI score
Exploits0References5
Prion
Prion
added 2021/01/25 10:16 a.m.20 views

Xxe

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

6.4CVSS8.8AI score0.01068EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2021/01/25 9:25 a.m.82 views

CVE-2021-23901

The CVE-2021-23901 issue affects Apache Nutch DmozParser prior to 1.18, where an XML External Entity (XXE) injection was exploitable due to improper XML processing. Affected component: DmozParser in Nutch versions

9.1CVSS9AI score0.01068EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2021/01/25 9:25 a.m.16 views

CVE-2021-23901 An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

9.1AI score0.01068EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/01/25 12:0 a.m.2 views

Apache Nutch 代码问题漏洞

Apache Nutch is a Java-based scalable crawler software from the Apache Foundation. Versions of Apache Nutch prior to 1.18 suffer from an XML external entity injection vulnerability that allows an attacker to view files on the application server file system and interact with any backend or externa...

9.1CVSS7.3AI score0.01068EPSS
Exploits0References8
vulnersOsv
vulnersOsv
added 2020/06/10 8:2 p.m.1 views

net.kieker-monitoring:analysis (>=2.0.0 <=2.0.3), org.apache.nutch:nutch (=1.10) potentially affected by CVE-2019-17573 via org.apache.cxf:cxf (>=2.7.18 <=3.0.4)

org.apache.cxf:cxf MAVEN version =2.7.18, =2.0.0, =2.0.3 - org.apache.nutch:nutch =1.10 Source cves: CVE-2019-17573 Source advisory: OSV:GHSA-F93P-F762-VR53...

6.1CVSS6.7AI score0.13981EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2020/05/22 7:23 p.m.1 views

net.kieker-monitoring:analysis (>=2.0.0 <=2.0.3), org.apache.nutch:nutch (=1.10) potentially affected by CVE-2019-12423 via org.apache.cxf:cxf (>=2.7.18 <=3.0.4)

org.apache.cxf:cxf MAVEN version =2.7.18, =2.0.0, =2.0.3 - org.apache.nutch:nutch =1.10 Source cves: CVE-2019-12423 Source advisory: OSV:GHSA-42F2-F9VC-6365...

7.5CVSS7.1AI score0.01164EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2019/11/08 5:15 p.m.3 views

net.kieker-monitoring:analysis (>=2.0.0 <=2.0.3), org.apache.nutch:nutch (=1.10) potentially affected by CVE-2019-12406 via org.apache.cxf:cxf (>=2.7.18 <=3.0.4)

org.apache.cxf:cxf MAVEN version =2.7.18, =2.0.0, =2.0.3 - org.apache.nutch:nutch =1.10 Source cves: CVE-2019-12406 Source advisory: OSV:GHSA-58P8-9G59-Q2HR...

6.5CVSS6.8AI score0.04134EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2019/11/08 5:12 p.m.2 views

net.kieker-monitoring:analysis (>=2.0.0 <=2.0.3), org.apache.nutch:nutch (=1.10) potentially affected by CVE-2019-12419 via org.apache.cxf:cxf (>=2.7.18 <=3.0.4)

org.apache.cxf:cxf MAVEN version =2.7.18, =2.0.0, =2.0.3 - org.apache.nutch:nutch =1.10 Source cves: CVE-2019-12419 Source advisory: OSV:GHSA-CW6W-Q88J-6MQF...

9.8CVSS7.1AI score0.11038EPSS
Exploits0
Rows per page
Query Builder