https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:05:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11250 bdu:2025-11250 https://cve.radiocsirt.org/vuln/bdu:2025-11250 https://cve.radiocsirt.org/vuln/certfr-2020-avi-350 certfr-2020-avi-350 https://cve.radiocsirt.org/vuln/certfr-2020-avi-350 https://cve.radiocsirt.org/vuln/euvd-2026-71224 EUVD-2026-71224 https://cve.radiocsirt.org/vuln/euvd-2026-71224 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000632 <p>dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.</p> <p>dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000632 https://cve.radiocsirt.org/vuln/ghsa-6pcc-3rfx-4gpm <p><strong>Affected:</strong> Maven: org.dom4j:dom4j, Maven: dom4j:dom4j</p> <p>dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.</p> <p>Note: This advisory applies to `dom4j:dom4j` version 1.x legacy artifacts. To resolve this a change to the latest version of `org.dom4j:dom4j` is recommended.</p> <p><strong>Affected:</strong> Maven: org.dom4j:dom4j, Maven: dom4j:dom4j</p> <p>dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.</p> <p>Note: This advisory applies to `dom4j:dom4j` version 1.x legacy artifacts. To resolve this a change to the latest version of `org.dom4j:dom4j` is recommended.</p> https://cve.radiocsirt.org/vuln/ghsa-6pcc-3rfx-4gpm https://cve.radiocsirt.org/vuln/gsd-2018-1000632 gsd-2018-1000632 https://cve.radiocsirt.org/vuln/gsd-2018-1000632 https://cve.radiocsirt.org/vuln/opensuse-su-2018:4045-1 <p>Security update for dom4j</p> <p>Security update for dom4j</p> https://cve.radiocsirt.org/vuln/opensuse-su-2018:4045-1 https://cve.radiocsirt.org/vuln/rhea-2019:1119 <p>undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents</p> <p>undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents</p> https://cve.radiocsirt.org/vuln/rhea-2019:1119 https://cve.radiocsirt.org/vuln/suse-su-2018:2861-1 <p>Security update for dom4j</p> <p>Security update for dom4j</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2861-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000632 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: dom4j, Ubuntu:16.04:LTS: dom4j, Ubuntu:18.04:LTS: dom4j</p> <p>dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: dom4j, Ubuntu:16.04:LTS: dom4j, Ubuntu:18.04:LTS: dom4j</p> <p>dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000632 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0068 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0068