Lucene search
+L

7228 matches found

Cvelist
Cvelist
added 2005/10/20 4:00 a.m.34 views

CVE-2005-3262

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename...

7.7AI score0.08795EPSS
SaveExploits1References4
securityvulns
securityvulns
added 2005/10/11 12:00 a.m.48 views

[Full-disclosure] Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 11/10/2005 - WinRAR Format String and Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/10/11 12:00 a.m.29 views

RARLAB WinRar 2.90/3.x - UUE/XXE Invalid Filename Error Message Format String

source: https://www.securityfocus.com/bid/15062/info WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an attacker to execute arbitrary code on a vulnerable computer. WinRAR 3.50 and prio...

7.5CVSS5.8AI score0.08795EPSS
SaveExploits1
securityvulns
securityvulns
added 2005/06/17 12:00 a.m.34 views

Adobe Reader 7: XML External Entity (XXE) Attack

XML External Entity XXE Attack Possible in Adobe Reader 7 ----------------------------------------------------------- SHH 7, 2005-06-16 Description ----------- Recent versions of Adobe Reader previously known as Acrobat Reader are vulnerable to XML External Entity XXE Attacks. By including a...

0.6AI score
SaveExploits0
CVE
CVE
added 2004/09/01 4:00 a.m.51 views

CVE-2002-1252

The CVE-2002-1252 entry concerns the Application Messaging Gateway for PeopleTools 8.1x (used in PeopleSoft products). Affected component/attack surface involves XML External Entities (XXE) fields in an HTTP POST processed by the SimpleFileHandler, allowing remote attackers to read arbitrary file...

5CVSS7.2AI score0.01373EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 1976/01/01 12:00 a.m.48 views

CVE-2021-46849

Removed by vendor...

6.8AI score
SaveExploits0
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:00 a.m.13 views

CVE-2026-45071: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

More info at https://symfony.com/cve-2026-45071...

8.7CVSS5.8AI score0.0057EPSS
SaveExploits0Affected Software1
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:00 a.m.50 views

Security Update for Microsoft Visual Studio 2008 Service Pack 1 XML Editor (KB2251487)

A security issue has been identified leading to an XXE Xml eXternal Entity vulnerability. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...

2.9AI score
SaveExploits0
Rows per page
Query Builder