54353 matches found
CVE-2025-64260
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through = 7.7...
Exploit for Improper Restriction of XML External Entity Reference in Apache Tika
CVE-2025-66516: Minimized Verification Environment This proje...
PT-2026-1915
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 6.1.0 Description An XML processing flaw exists in the XWork component of Apache Struts, specifically within the unconfigured SAX parser of the DomHelper class. The component fails to properly validate XML...
CVE-2023-53908
HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration. Attackers can send crafted XML payloads to the /mopsdata endpoint with a specific role value to elevate their user privileges to...
XXE (XML External Entity Injection) org.apache.tika:tika-core Dependency in Confluence Data Center and Server
This High severity XXE XML External Entity Injection vulnerability was introduced in versions 7.7.0 of Confluence Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 8.4 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H allows an...
CVE-2022-50685
A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts via XML file uploads as page attachments or metafiles. Attackers can upload malicious XML files that enable stored XSS, allowing malicious scripts to execute in users' browsers...
rexml: REXML denial of service
A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance...
EUVD-2025-204068
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through = 7.7...
CVE-2025-64260
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through = 7.7...
XXE (XML External Entity Injection) in Confluence Data Center and Server
This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity XXE XML External Entity Injection vulnerability was introduced in versions 9.2.8 and 10.2.0 of Confluence Data Center a...
CVE-2025-64260 WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through = 7.7...
CVE-2025-64260
CVE-2025-64260 concerns the WordPress plugin ANAC XML Bandi di Gara (AVCP) ≤7.7, with a reflected XSS vulnerability in web page generation. Affected software is the ANAC XML Bandi di Gara plugin for WordPress (versions up to 7.7). The issue arises from improper input neutralization during page re...
CVE-2025-64260 WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through = 7.7...
XML External Entity (XXE) Injection
Overview biopython is a Freely available tools for computational molecular biology. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the Bio.Entrez class. An attacker can access sensitive information or cause limited denial of service by submitting crafted...
EUVD-2025-204037
Biopython is vulnerable to doctype XML external entity XXE injection through Bio.Entrez...
GHSA-X3VF-39HJ-GXR4 Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
Bio.Entrez in Biopython through 1.86 allows doctype XXE...
Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
Bio.Entrez in Biopython through 1.86 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...