Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:17:37 +0000 cnvd-2019-47026 https://cve.radiocsirt.org/vuln/cnvd-2019-47026 cnvd-2019-47026 https://cve.radiocsirt.org/vuln/cnvd-2019-47026 EUVD-2026-116399 https://cve.radiocsirt.org/vuln/euvd-2026-116399 EUVD-2026-116399 https://cve.radiocsirt.org/vuln/euvd-2026-116399 fkie_cve-2011-3600 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3600 <p>The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figure out from returned error messages whether a file exists or not. This affects OFBiz 16.11.01 to 16.11.04.</p> <p>The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figure out from returned error messages whether a file exists or not. This affects OFBiz 16.11.01 to 16.11.04.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-3600 GHSA-88hg-2f8p-pv3w https://cve.radiocsirt.org/vuln/ghsa-88hg-2f8p-pv3w <p>The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figure out from returned error messages whether a file exists or not. This affects OFBiz 16.11.01 to 16.11.04.</p> <p>The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figure out from returned error messages whether a file exists or not. This affects OFBiz 16.11.01 to 16.11.04.</p> https://cve.radiocsirt.org/vuln/ghsa-88hg-2f8p-pv3w gsd-2011-3600 https://cve.radiocsirt.org/vuln/gsd-2011-3600 gsd-2011-3600 https://cve.radiocsirt.org/vuln/gsd-2011-3600