Lucene search
+L

14 matches found

NVD
NVD
added 2026/08/12 4:16 p.m.11 views

CVE-2026-15803

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

8.7CVSS0.00344EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/12 3:38 p.m.8 views

CVE-2026-15803

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

8.7CVSS5.4AI score0.00344EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/12 3:38 p.m.9 views

EUVD-2026-57314

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

8.7CVSS5.4AI score0.01734EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.6 views

SUSE CVE-2006-0296

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...

5CVSS7.5AI score0.04136EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2006/08/17 9:04 p.m.24 views

CVE-2006-4197

Multiple buffer overflows in libmusicbrainz aka mbclient or MusicBrainz Client Library 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 a long Location header by the HTTP server, which triggers an overflow in th...

7.5CVSS6.3AI score0.14457EPSS
SaveExploits2References2
NVD
NVD
added 2006/08/17 9:04 p.m.16 views

CVE-2006-4197

Multiple buffer overflows in libmusicbrainz aka mbclient or MusicBrainz Client Library 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 a long Location header by the HTTP server, which triggers an overflow in th...

7.5CVSS7.9AI score0.14457EPSS
SaveExploits2References21
Tenable Nessus
Tenable Nessus
added 2006/07/05 12:00 a.m.31 views

CentOS 4 : firefox (CESA-2006:0200)

An updated firefox package that fixes several security bugs is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Igor Bukanov discovered a bug in the way Firefox's JavaScript interpret...

7.5CVSS6AI score0.12589EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2006/02/02 8:06 p.m.32 views

CVE-2006-0296

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...

5CVSS6.1AI score0.04136EPSS
SaveExploits0References4
OSV
OSV
added 2006/02/02 8:06 p.m.7 views

DEBIAN-CVE-2006-0296

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...

5CVSS7AI score0.04136EPSS
SaveExploits0References1
NVD
NVD
added 2006/02/02 8:06 p.m.23 views

CVE-2006-0296

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...

5CVSS7AI score0.04136EPSS
SaveExploits0References62
Prion
Prion
added 2006/02/02 8:06 p.m.18 views

Design/Logic Flaw

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...

5CVSS7.1AI score0.04136EPSS
SaveExploits0References62Affected Software2
Cvelist
Cvelist
added 2006/02/02 8:00 p.m.32 views

CVE-2006-0296

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file...

6.9AI score0.04136EPSS
SaveExploits0References62
CVE
CVE
added 2006/02/02 8:00 p.m.97 views

CVE-2006-0296

CVE-2006-0296 affects Mozilla Suite components including Mozilla/Firefox up to 1.5.0.1 and SeaMonkey up to 1.0. The vulnerability arises in the XULDocument.persist function where the attribute name is not validated, enabling remote attackers to inject RDF data into the user’s localstore.rdf and e...

5CVSS6.9AI score0.04136EPSS
SaveExploits0References62Affected Software2
RedHat Linux
RedHat Linux
added 2006/02/02 3:50 p.m.50 views

Critical: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes several security bugs is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Igor Bukanov discovered a bug in the way Firefox's Javascript interpret...

7.5CVSS6.1AI score0.12589EPSS
SaveExploits1References4
Rows per page
Query Builder