CVE-2026-0888

Information disclosure in the XML component. This vulnerability affects Firefox 147 and Thunderbird 147...

CVE-2026-0888

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0888

Information disclosure in the XML component. This vulnerability affects Firefox 147 and Thunderbird 147...

CVE-2026-0888

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0888 Information disclosure in the XML component

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0888

The Mozilla Firefox web browser and Mozilla Thunderbird email client are affected by an information disclosure vulnerability within the XML component . This flaw allows a malicious actor to potentially gain access to confidential data . The vulnerability has been addressed in Firefox 147 and Thun...

CVE-2026-0888: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

PT-2026-2650

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147 Description An information disclosure issue exists in the XML component. Recommendations Update to Firefox version 147 or later...

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

CVE-2024-21242

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via HTTP to compromise XML...

Google Chrome XML Component Data Compromise

The vulnerability of the Google Chrome XML browser component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

Google Chrome XML Bypass ASLR

The vulnerability of the Google Chrome XML browser component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism by using a specially created HTML page...

SUSE CVE-2009-3852

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

Oracle MySQL XML DoS

A vulnerability in the Server: XML subcomponent of the MySQL Server XML component of the Oracle MySQL database management system is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Castor XML Disclosure

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server relates to errors in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2017-10261

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML Database executes to...

MySQL Database Access Bypass

The vulnerability of the Oracle MySQL database management system, related to the MySQL Server component within Oracle MySQL, allows unauthorized users who have been authenticated to influence data accessibility by using a sub-component XML...

XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke

Hello, Microsoft recently published MS11-074. This bulletin concerns mainly SharePoint 2007 and 2010 but CVE-2011-1892 applies too to Office Groove client and server, Office Forms Server 2007 and Office Web Apps 2010. The vulnerability is a "XML External Entity Reference" one, as described in...

CVE-2009-3852

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

Design/Logic Flaw

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...