Most recent entries from all

bdu:2022-05231

certfr-2021-avi-770 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan…

certfr-2021-avi-770

cnvd-2021-03544

EUVD-2026-215948

fkie_cve-2021-23926

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

GHSA-mw3r-pfmg-xp92 — Improper Restriction of Recursive Entity References in Apache XMLBeans

Affected: Maven: org.apache.xmlbeans:xmlbeans

gsd-2021-23926

NCSC-2026-0028 — Kwetsbaarheden verholpen in Oracle Analytics

NCSC-2026-0028

OESA-2021-1077 — xmlbeans security update

Affected: openEuler:20.03-LTS-SP1: xmlbeans

XMLBeans is a tool that allows you to access the full power of XML in a Java friendly way. It is an XML-Java binding tool. The idea is that you can take advantage the richness and features of XML and XML Schema and have these features mapped as naturally as possible to the equivalent Java language and typing constructs. XMLBeans uses XML Schema to compile Java interfaces and classes that you can then use to access and modify XML instance data. Using XMLBeans is similar to using any other Java interface/class, you will see things like getFoo or setFoo just as you would expect when working with Java. While a major use of XMLBeans is to access your XML instance data with strongly typed Java classes there are also API's that allow you access to the full XML infoset (XMLBeans keeps full XML Infoset fidelity) as well as to allow you to reflect into the XML schema itself through an XML Schema Object model. Security Fix(es): The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.(CVE-2021-23926)

openSUSE-SU-2024:12455-1 — xmlbeans-2.6.0-12.1 on GA media

xmlbeans-2.6.0-12.1 on GA media

RHSA-2021:5134 — Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete log4j: improper validation of certificate with host mismatch in SMTP appender batik: SSRF due to improper input validation by the NodePickerPanel xmlgraphics-commons: SSRF due to improper input validation by the XMPParser tomcat: Apache Tomcat HTTP/2 Request mix-up libthrift: potential DoS when processing untrusted payloads bouncycastle: Timing issue within the EC math library groovy: OS temporary directory leads to information disclosure tomcat: HTTP/2 request header mix-up XStream: remote code execution due to insecure XML deserialization when relying on blocklists XStream: arbitrary file deletion on the local host when unmarshalling jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS undertow: special character in query results in server errors jackson-dataformat-cbor: Unchecked allocation…

SUSE-SU-2022:3876-1 — Security update for xmlbeans

Security update for xmlbeans

UBUNTU-CVE-2021-23926

Affected: Ubuntu:16.04:LTS: xmlbeans, Ubuntu:18.04:LTS: xmlbeans

WID-SEC-W-2023-1807 — Oracle Fusion Middleware: Mehrere Schwachstellen

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.