Most recent entries from all

BIT-solr-2021-33813

Affected: Bitnami: solr

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

certfr-2022-avi-386 — De multiples vulnérabilités ont été découvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent à un attaquant…

certfr-2022-avi-386

EUVD-2026-28598

fkie_cve-2021-33813

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

GHSA-2363-cqg2-863c — XML External Entity (XXE) Injection in JDOM

Affected: Maven: org.jdom:jdom2, Maven: org.jdom:jdom

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call `builder.setExpandEntities(false)` and they won't be expanded.

gsd-2021-33813

OESA-2022-1630 — jdom2 security update

Affected: openEuler:20.03-LTS-SP1: jdom2, openEuler:20.03-LTS-SP3: jdom2, openEuler:22.03-LTS: jdom2

JDOM is an in-memory representation of an XML document. XML consists of elements (which have attributes), text data, 'entity' references, processing instructions, and comments. XML documents can also have a DocType declaration, Comments, and Processing Instructions before the root element. Security Fix(es): An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.(CVE-2021-33813)

openSUSE-SU-2021:1031-1 — Security update for jdom2

Security update for jdom2

RHSA-2022:1029 — Red Hat Security Advisory: Red Hat Integration Camel-K 1.6.4 release and security update

guava: local information disclosure via temporary directory created with unsafe permissions bouncycastle: Timing issue within the EC math library jetty: buffer not correctly recycled in Gzip Request inflation undertow: buffer leak on incoming websocket PONG message may lead to DoS RESTEasy: PathParam in RESTEasy can lead to a reflected XSS attack XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host maven: Block repositories using http by default jersey: Local information disclosure via system temporary directory jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate jdom: XXE allows attackers to cause a DoS via a crafted HTTP request cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

SUSE-SU-2021:2293-1 — Security update for jdom2

Security update for jdom2

UBUNTU-CVE-2021-33813

Affected: Ubuntu:14.04:LTS: libjdom1-java, Ubuntu:16.04:LTS: libjdom1-java, Ubuntu:16.04:LTS: libjdom2-java, Ubuntu:18.04:LTS: libjdom1-java, Ubuntu:18.04:LTS: libjdom2-java, Ubuntu:20.04:LTS: libjdom1-java, Ubuntu:20.04:LTS: libjdom2-java, Ubuntu:22.04:LTS: libjdom1-java, Ubuntu:22.04:LTS: libjdom2-java, Ubuntu:24.04:LTS: libjdom1-java and 5 more

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

WID-SEC-W-2022-0607 — Red Hat FUSE: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.