https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 19:25:05 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-199 certa-2013-avi-199 https://cve.radiocsirt.org/vuln/certa-2013-avi-199 https://cve.radiocsirt.org/vuln/euvd-2026-210812 EUVD-2026-210812 https://cve.radiocsirt.org/vuln/euvd-2026-210812 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3363 <p>Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.</p> <p>Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3363 https://cve.radiocsirt.org/vuln/ghsa-7pg4-5233-82jv <p><strong>Affected:</strong> Packagist: zendframework/zendframework1</p> <p>`Zend_XmlRpc` in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle `SimpleXMLElement` classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.</p> <p><strong>Affected:</strong> Packagist: zendframework/zendframework1</p> <p>`Zend_XmlRpc` in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle `SimpleXMLElement` classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/ghsa-7pg4-5233-82jv https://cve.radiocsirt.org/vuln/gsd-2012-3363 gsd-2012-3363 https://cve.radiocsirt.org/vuln/gsd-2012-3363 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-3363 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zend-framework</p> <p>Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zend-framework</p> <p>Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-3363