Most recent entries from all

bdu:2020-00970

certfr-2021-avi-556 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu…

certfr-2021-avi-556

cnvd-2019-41291

EUVD-2026-55026

fkie_cve-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

GHSA-9jwc-q6j3-8g9g — Improper Restriction of XML External Entity Reference in Apache POI

Affected: Maven: org.apache.poi:poi

gsd-2019-12415

RHSA-2021:5134 — Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete log4j: improper validation of certificate with host mismatch in SMTP appender batik: SSRF due to improper input validation by the NodePickerPanel xmlgraphics-commons: SSRF due to improper input validation by the XMPParser tomcat: Apache Tomcat HTTP/2 Request mix-up libthrift: potential DoS when processing untrusted payloads bouncycastle: Timing issue within the EC math library groovy: OS temporary directory leads to information disclosure tomcat: HTTP/2 request header mix-up XStream: remote code execution due to insecure XML deserialization when relying on blocklists XStream: arbitrary file deletion on the local host when unmarshalling jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS undertow: special character in query results in server errors jackson-dataformat-cbor: Unchecked allocation…

UBUNTU-CVE-2019-12415

Affected: Ubuntu:16.04:LTS: libapache-poi-java, Ubuntu:18.04:LTS: libapache-poi-java, Ubuntu:20.04:LTS: libapache-poi-java, Ubuntu:22.04:LTS: libapache-poi-java, Ubuntu:24.04:LTS: libapache-poi-java, Ubuntu:25.10: libapache-poi-java, Ubuntu:26.04:LTS: libapache-poi-java

WID-SEC-W-2023-0122 — Oracle Supply Chain: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.