共收录 148 条相关情报。
← 返回所有主题CVE-2026-88789
Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apa
CVE-2026-88789
Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apa
CVE-2026-102127
An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional,
CVE-2026-82386
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files
CVE-2026-82376
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on
CVE-2026-82376
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on
CVE-2026-82386
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files
CVE-2026-61741
http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. These decoders use
CVE-2026-81536
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information
CVE-2026-81536
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information
CVE-2026-18184
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
CVE-2026-18172
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
CVE-2026-17646
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi
CVE-2026-18172
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
CVE-2026-17646
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi
CVE-2026-61570
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5
CVE-2026-94108
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail
CVE-2026-94108
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail
CVE-2026-94108
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail
CVE-2026-76446
A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific&