Vulnerabilities (CVE)

Filtered by CWE-776
Total 63 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4335 1 Openpne 1 Opopensocialplugin 2024-11-21 7.5 HIGH 9.8 CRITICAL
opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities
CVE-2012-6685 2 Nokogiri, Redhat 8 Nokogiri, Cloudforms Management Engine, Enterprise Mrg and 5 more 2024-11-21 5.0 MEDIUM 7.5 HIGH
Nokogiri before 1.5.4 is vulnerable to XXE attacks
CVE-2012-3340 1 Ibm 1 Infosphere Guardium 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.