https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:58:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-165504 EUVD-2026-165504 https://cve.radiocsirt.org/vuln/euvd-2026-165504 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4399 <p>The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> <p>The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-4399 https://cve.radiocsirt.org/vuln/ghsa-5964-pq8r-4q62 <p><strong>Affected:</strong> Packagist: cakephp/cakephp</p> <p>The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> <p><strong>Affected:</strong> Packagist: cakephp/cakephp</p> <p>The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/ghsa-5964-pq8r-4q62 https://cve.radiocsirt.org/vuln/gsd-2012-4399 gsd-2012-4399 https://cve.radiocsirt.org/vuln/gsd-2012-4399