Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:16:19 +0000 bdu:2025-04265 https://cve.radiocsirt.org/vuln/bdu:2025-04265 bdu:2025-04265 https://cve.radiocsirt.org/vuln/bdu:2025-04265 cnvd-2017-36203 https://cve.radiocsirt.org/vuln/cnvd-2017-36203 cnvd-2017-36203 https://cve.radiocsirt.org/vuln/cnvd-2017-36203 EUVD-2026-75600 https://cve.radiocsirt.org/vuln/euvd-2026-75600 EUVD-2026-75600 https://cve.radiocsirt.org/vuln/euvd-2026-75600 fkie_cve-2017-9096 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9096 <p>The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.</p> <p>The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9096 GHSA-86p9-x5pw-94qx — Improper Restriction of XML External Entity Reference in iText https://cve.radiocsirt.org/vuln/ghsa-86p9-x5pw-94qx <p><strong>Affected:</strong> Maven: com.itextpdf:itextpdf, Maven: com.lowagie:itext</p> <p>The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.</p> <p><strong>Affected:</strong> Maven: com.itextpdf:itextpdf, Maven: com.lowagie:itext</p> <p>The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.</p> https://cve.radiocsirt.org/vuln/ghsa-86p9-x5pw-94qx gsd-2017-9096 https://cve.radiocsirt.org/vuln/gsd-2017-9096 gsd-2017-9096 https://cve.radiocsirt.org/vuln/gsd-2017-9096 WID-SEC-W-2023-1048 — Oracle Construction and Engineering: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1048 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1048