Lucene search
K

3 matches found

CNNVD
CNNVD
added 2022/03/05 12:0 a.m.2 views

Apache Any23 代码问题漏洞

Apache Any23 is a library, Web service, and command-line tool from the Apache Foundation, USA. It can extract structured data in RDF format from a variety of Web documents.Any23 versions prior to 2.7 contain a code issue vulnerability that could be exploited by an attacker to interfere with an...

9.1CVSS5.8AI score0.01272EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.1 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the possibility of interference with XML data processing by the application, allows a intruder to gain access to the files in the application server’s file system.

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation Andover Continuum System is related to the possibility of interference with XML data processing by the application. Exploiting this vulnerability can allow a...

10CVSS0.00571EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:0 a.m.1 views

The vulnerability of the XStream Java library for converting objects to XML or JSON format allows attackers to execute arbitrary commands due to the recovery of unreliable data from memory.

The vulnerability of the XStream library for converting objects to XML or JSON format is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by interfering with the processing of XML objects or other support...

10CVSS8.1AI score0.92761EPSS
Exploits8References8Affected Software29
Rows per page
Query Builder