CVE-2013-0340
Published Jan 21, 2014expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to…
CWE archive
CWE-611 CVEs
Programmatic archive1,288 CVEs tagged with CWE-611 — 260 Critical, 576 High, 418 Medium, 34 Low, 0 Unrated.
CVE-2013-1824
Published Sep 16, 2013The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in…
CVE-2013-1915
Published Apr 25, 2013ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an…
CVE-2012-3363
Published Feb 13, 2013Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files…
CVE-2012-5656
Published Jan 18, 2013The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection att…
CVE-2012-2239
Published Nov 24, 2012Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as de…
CVE-2012-4399
Published Oct 9, 2012The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML e…
CVE-2012-3489
Published Oct 3, 2012The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2012-0037
Published Jun 17, 2012Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remo…
CVE-2011-4107
Published Nov 17, 2011The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated us…
CVE-2010-3322
Published Sep 14, 2010The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unkno…
CVE-2009-1699
Published Jun 10, 2009The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML ex…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2005-1306
Published Jun 15, 2005The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML E…
Showing 1,276-1,288 of 1,288 CVEsPage 52 of 52