https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:18:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-04135 bdu:2015-04135 https://cve.radiocsirt.org/vuln/bdu:2015-04135 https://cve.radiocsirt.org/vuln/euvd-2026-108585 EUVD-2026-108585 https://cve.radiocsirt.org/vuln/euvd-2026-108585 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6408 <p>The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.</p> <p>The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-6408 https://cve.radiocsirt.org/vuln/ghsa-45w3-2hvv-pfxq <p><strong>Affected:</strong> Maven: org.apache.solr:solr-core</p> <p>The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.</p> <p><strong>Affected:</strong> Maven: org.apache.solr:solr-core</p> <p>The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.</p> https://cve.radiocsirt.org/vuln/ghsa-45w3-2hvv-pfxq https://cve.radiocsirt.org/vuln/gsd-2013-6408 gsd-2013-6408 https://cve.radiocsirt.org/vuln/gsd-2013-6408 https://cve.radiocsirt.org/vuln/rhsa-2013:1844 <p>Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: directory traversal when loading XSL stylesheets and Velocity templates Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler</p> <p>Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: directory traversal when loading XSL stylesheets and Velocity templates Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1844 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6408 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lucene-solr, Ubuntu:16.04:LTS: lucene-solr</p> <p>The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lucene-solr, Ubuntu:16.04:LTS: lucene-solr</p> <p>The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6408