Lucene search
+L

1102 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.30 views

The vulnerability of the ezxml_internal_dtd function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmlinternaldtd function in the XML document syntax analysis library ezXML is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

7.8CVSS6.5AI score0.01124EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.14 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created XML file...

7.8CVSS7.5AI score0.01347EPSS
SaveExploits0References8Affected Software7
OSV
OSV
added 2023/06/29 9:30 p.m.48 views

GHSA-J6V2-MWXM-F952 py-xml XML External Entity Injection vulnerability

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/06/29 9:30 p.m.31 views

easy-parse XML External Entity Injection vulnerability

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2023/06/29 9:15 p.m.27 views

CVE-2020-26710

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/29 9:15 p.m.17 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score
SaveExploits0References2
NVD
NVD
added 2023/06/29 9:15 p.m.19 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00737EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/29 9:15 p.m.31 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1
PyPA
PyPA
added 2023/06/29 9:15 p.m.15 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/06/29 9:15 p.m.21 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/29 9:15 p.m.10 views

PYSEC-2023-96

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.2AI score0.00737EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/06/29 12:00 a.m.8 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

8.6AI score0.00802EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/29 12:00 a.m.21 views

Requests-XML 代码问题漏洞

Requests-XML is a library for parsing XML from the individual developers at erinxocon. A security vulnerability exists in requests-xml version v0.2.3, which stems from the inclusion of an XML External Entity Injection XXE vulnerability that allows an attacker to execute arbitrary code via a craft...

7.5CVSS7.8AI score0.00737EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/06/29 12:00 a.m.27 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00737EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/06/29 12:00 a.m.36 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00802EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/05 4:15 p.m.20 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

7.8CVSS5.6AI score0.00428EPSS
SaveExploits1References3
OSV
OSV
added 2023/06/05 4:15 p.m.9 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

5.5CVSS6.3AI score0.00428EPSS
SaveExploits1References3
Prion
Prion
added 2023/06/05 4:15 p.m.22 views

Buffer overflow

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

1.9CVSS5.6AI score0.00428EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/05 12:00 a.m.8 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

7.4AI score0.00428EPSS
SaveExploits1References3
CVE
CVE
added 2023/06/05 12:00 a.m.42 views

CVE-2023-33693

CVE-2023-33693 affects EasyPlayerPro-Win, versions 3.2.19.0106 through 3.6.19.0823. A buffer overflow in processing a crafted XML file leads to Denial of Service (DoS). CVSS data indicates a local attack vector with user interaction required; impact on availability is high. Connected sources corr...

7.8CVSS5.6AI score0.00428EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder