#cwe-611

共收录 148 条相关情报。

← 返回所有主题
安全公告2026-05-04 发布INFO

changedetection.io project has an XXE vulnerability

CVE-2026-41895

# changedetection.io_XXE_01 Vulnerability Report: We discovered a XXE vulnerability in the changedetection.io project W

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The Dic...

CVE-2026-40682

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOp...

CVE-2026-6501

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serial

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core...

CVE-2025-14543

Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core Libraries) allows Seri

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core Libraries) allows Serialized Data External Linking.This issue affects Connext P...

CVE-2025-14543

Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core Libraries) allows Seri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on th...

CVE-2024-13971

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP...

CVE-2024-39847

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. Thi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the appli...

CVE-2024-39847

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. Thi

历史摘要 · 未重新核验 · NVD