Lucene search
K

26 matches found

OSV
OSV
added 2021/10/31 8:15 p.m.1 views

CVE-2020-26705

The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity XXE vulnerability which allows for an attacker to expose sensitive data or perform a denial of service DOS via a crafted external entity entered into the XML content as input...

9.1CVSS7.3AI score0.00309EPSS
Exploits0References1
OSV
OSV
added 2021/10/31 8:15 p.m.14 views

PYSEC-2021-388

The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity XXE vulnerability which allows for an attacker to expose sensitive data or perform a denial of service DOS via a crafted external entity entered into the XML content as input...

9.1CVSS5.5AI score0.00309EPSS
Exploits0References2
Prion
Prion
added 2021/10/31 8:15 p.m.13 views

Xxe

The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity XXE vulnerability which allows for an attacker to expose sensitive data or perform a denial of service DOS via a crafted external entity entered into the XML content as input...

6.4CVSS8.9AI score0.00309EPSS
Exploits0References1Affected Software1
PyPA
PyPA
added 2021/10/31 8:15 p.m.4 views

PYSEC-2021-388

The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity XXE vulnerability which allows for an attacker to expose sensitive data or perform a denial of service DOS via a crafted external entity entered into the XML content as input...

9.1CVSS7.2AI score0.00309EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/10/31 7:51 p.m.11 views

CVE-2020-26705

The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity XXE vulnerability which allows for an attacker to expose sensitive data or perform a denial of service DOS via a crafted external entity entered into the XML content as input...

9AI score0.00309EPSS
Exploits0References1
CVE
CVE
added 2021/10/31 7:51 p.m.67 views

CVE-2020-26705

CVE-2020-26705 affects Easy-XML 0.5.0, where the parseXML function is vulnerable to XML External Entity (XXE) processing. The underlying issue allows an attacker to expose sensitive data or cause a denial of service via a crafted external entity in the XML input. Exploitation details are not prov...

9.1CVSS8.9AI score0.00309EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder