Lucene search
+L

1241 matches found

BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•35 views

The vulnerability of the ezxml_internal_dtd function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmlinternaldtd function in the XML document syntax analysis library ezXML is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

7.8CVSS6.5AI score0.01124EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•17 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created XML file...

7.8CVSS7.5AI score0.01347EPSS
SaveExploits0References8Affected Software7
OSV
OSV
•added 2023/06/29 9:30 p.m.•52 views

GHSA-J6V2-MWXM-F952 py-xml XML External Entity Injection vulnerability

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/06/29 9:30 p.m.•38 views

easy-parse XML External Entity Injection vulnerability

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/06/29 9:15 p.m.•32 views

CVE-2020-26710

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/29 9:15 p.m.•19 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score
SaveExploits0References2
NVD
NVD
•added 2023/06/29 9:15 p.m.•26 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00737EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/29 9:15 p.m.•38 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1
PyPA
PyPA
•added 2023/06/29 9:15 p.m.•18 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/06/29 9:15 p.m.•27 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/29 9:15 p.m.•14 views

PYSEC-2023-96

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.2AI score0.00737EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/29 12:00 a.m.•28 views

Requests-XML 代码问题漏洞

Requests-XML is a library for parsing XML from the individual developers at erinxocon. A security vulnerability exists in requests-xml version v0.2.3, which stems from the inclusion of an XML External Entity Injection XXE vulnerability that allows an attacker to execute arbitrary code via a craft...

7.5CVSS7.8AI score0.00737EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/06/29 12:00 a.m.•9 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

8.6AI score0.00802EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/29 12:00 a.m.•42 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00802EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/29 12:00 a.m.•35 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00737EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/05 4:15 p.m.•14 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

5.5CVSS6.3AI score0.00428EPSS
SaveExploits1References3
NVD
NVD
•added 2023/06/05 4:15 p.m.•24 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

7.8CVSS5.6AI score0.00428EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/05 4:15 p.m.•27 views

Buffer overflow

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

1.9CVSS5.6AI score0.00428EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/05 12:00 a.m.•11 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

7.4AI score0.00428EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/05 12:00 a.m.•2 views

CVE-2023-33693: Out-of-bounds Write

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

5.5CVSS6AI score0.00428EPSS
SaveExploits1References3
Rows per page
Query Builder