Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

11 matches found

Github Security Blog
Github Security Blog•added 2018/10/17 6:28 p.m.•124 views

JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.8CVSS5.2AI score0.27873EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa•added 2018/10/17 6:28 p.m.•155 views

GHSA-6FVX-R7HX-3VH6 JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.8CVSS9.5AI score0.27873EPSS
SaveExploits0References7
Veracode
Veracode•added 2018/09/27 7:28 a.m.•36 views

XML External Entity (XXE)

javamelody-core is vulnerable to XML external entity attacks. This is due to enabled support for external entities and DTD in parseSoapMethodName function in bull/javamelody/PayloadNameRequestWrapper.java which allows for a remote attacker to perform such attacks...

9.8CVSS9.1AI score0.27873EPSS
SaveExploits0References4Affected Software1
Prion
Prion•added 2018/09/26 10:29 p.m.•35 views

Code injection

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

7.5CVSS9.4AI score0.27873EPSS
SaveExploits0References4Affected Software1
NVD
NVD•added 2018/09/26 10:29 p.m.•25 views

CVE-2018-15531

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.8CVSS9.5AI score0.27873EPSS
SaveExploits0References4
osv_cve
osv_cve•added 2018/09/26 10:29 p.m.•42 views

CVE-2018-15531

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.8CVSS6.8AI score0.27873EPSS
SaveExploits0References4
CVE
CVE•added 2018/09/26 10:00 p.m.•177 views

CVE-2018-15531

CVE-2018-15531 affects JavaMelody up to version 1.74.0, where parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java is vulnerable to XML External Entity (XXE) processing. The XXE flaw can enable an attacker to trigger external entity resolution, which may lead to exposure of sensi...

9.8CVSS9.4AI score0.27873EPSS
SaveExploits0References4Affected Software1
Mend
Mend•added 2018/09/26 10:00 p.m.•12 views

CVE-2018-15531

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.8CVSS0.27873EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2018/09/26 10:00 p.m.•41 views

CVE-2018-15531

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.5AI score0.27873EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2018/09/26 12:00 a.m.•7 views

PT-2018-13068

Name of the Vulnerable Software and Affected Versions JavaMelody versions prior to 1.74.0 Description The issue concerns an XXE XML External Entity vulnerability. It is related to the parseSoapMethodName function in the PayloadNameRequestWrapper.java file. Recommendations For versions prior to...

9.8CVSS0.27873EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•8 views

CVE-2018-15531: Improper Restriction of XML External Entity Reference

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java...

9.8CVSS8.2AI score0.27873EPSS
SaveExploits0References2
Rows per page
Query Builder