Lucene search
K

2726 matches found

OSV
OSV
added 2022/02/21 12:50 p.m.3 views

SUSE-SU-2022:0542-1 Security update for xerces-j2

This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser bsc1195108...

7.1CVSS6.8AI score0.0444EPSS
Exploits0References3
CNVD
CNVD
added 2022/02/21 12:0 a.m.33 views

Expat has an unspecified vulnerability (CNVD-2022-18357)

Expat is a fast streaming XML parser written in C. A security vulnerability existed prior to Expat 2.4.5, which could be exploited by attackers to insert namespace separators into namespace URIs...

9.8CVSS4.2AI score0.33936EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/21 12:0 a.m.45 views

Expat has an unspecified vulnerability (CNVD-2022-18356)

Expat is a fast streaming XML parser written in C. A security vulnerability exists in Expat prior to 2.4.5, which stems from a lack of certain encoding validations in xmltokimpl.c. No detailed vulnerability details are currently available...

9.8CVSS3.5AI score0.04915EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/19 12:0 a.m.30 views

SUSE SLES15 Security Update : xerces-j2 (SUSE-SU-2022:0500-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0500-1 advisory. - There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This cause...

7.1CVSS7.3AI score0.0444EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/02/19 12:0 a.m.10 views

SUSE: Security Advisory (SUSE-SU-2022:0500-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS8AI score0.0444EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/19 12:0 a.m.27 views

SUSE SLED15 / SLES15 Security Update : xerces-j2 (SUSE-SU-2022:0503-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0503-1 advisory. - There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads...

7.1CVSS7.3AI score0.0444EPSS
Exploits0References4
OSV
OSV
added 2022/02/18 9:56 a.m.6 views

OPENSUSE-SU-2022:0503-1 Security update for xerces-j2

This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser bsc1195108...

7.1CVSS6.9AI score0.0444EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2022/02/18 12:0 a.m.34 views

Security update for xerces-j2 (important)

openSUSE Security Update: Security update for xerces-j2 Announcement ID: openSUSE-SU-2022:0500-1 Rating: important References: 1195108 Cross-References: CVE-2022-23437 CVSS scores: CVE-2022-23437 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-23437 SUSE: 7.5...

7.5CVSS6.7AI score0.0444EPSS
Exploits0References1
Fedora
Fedora
added 2022/02/16 1:27 a.m.11 views

[SECURITY] Fedora 35 Update: expat-2.4.4-1.fc35

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

2.1AI score
Exploits0
Fedora
Fedora
added 2022/02/16 1:13 a.m.11 views

[SECURITY] Fedora 34 Update: expat-2.4.4-1.fc34

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

2.1AI score
Exploits0
CNNVD
CNNVD
added 2022/02/16 12:0 a.m.2 views

Expat 输入验证错误漏洞

Expat is a fast streaming XML parser written in C. A security vulnerability existed prior to Expat 2.4.5, which could be exploited by attackers to insert namespace separators into namespace URIs...

9.8CVSS8.5AI score0.33936EPSS
Exploits0References79
CNNVD
CNNVD
added 2022/02/16 12:0 a.m.3 views

Expat 代码注入漏洞

Expat is a fast streaming XML parser written in C. A security vulnerability exists in Expat prior to 2.4.5, which stems from a lack of certain encoding validations in xmltokimpl.c. No detailed vulnerability details are currently available...

9.8CVSS8.5AI score0.04915EPSS
Exploits0References79
NVD
NVD
added 2022/02/15 5:15 p.m.23 views

CVE-2022-25209

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS0.0109EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/15 5:15 p.m.4 views

CVE-2022-25209

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS7.3AI score0.0109EPSS
Exploits0References2
OSV
OSV
added 2022/02/15 5:15 p.m.29 views

CVE-2022-25209

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS8.9AI score
Exploits0References1
CVE
CVE
added 2022/02/15 4:11 p.m.122 views

CVE-2022-25209

CVE-2022-25209 affects the Jenkins Chef Sinatra Plugin (versions 1.20 and earlier). The root cause is that the plugin does not configure its XML parser to prevent XML External Entity (XXE) attacks, enabling crafted XML responses to be parsed with potential exposure of secrets from the Jenkins con...

8.8CVSS8.6AI score0.0109EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/15 4:11 p.m.34 views

CVE-2022-25209

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.9AI score0.0109EPSS
Exploits0References1
Fedora
Fedora
added 2022/02/12 1:20 a.m.42 views

[SECURITY] Fedora 35 Update: mingw-expat-2.4.4-1.fc35

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

7.5CVSS2.1AI score0.03959EPSS
Exploits0
Fedora
Fedora
added 2022/02/12 1:16 a.m.43 views

[SECURITY] Fedora 34 Update: mingw-expat-2.4.4-1.fc34

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

7.5CVSS2.1AI score0.03959EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/02/12 12:0 a.m.17 views

Fedora: Security Advisory for mingw-expat (FEDORA-2022-88f6a3d290)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.03959EPSS
Exploits0References2
Rows per page
Query Builder