Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xml security for java vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2013-4517
Apache Santuario XML Security for Java prior to 1.5.6, when applying Transforms, allows remote malicious users to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
Apache Santuario Xml Security For Java 1.4.1Apache Santuario Xml Security For Java 1.4.2Apache Santuario Xml Security For Java 1.4.3Apache Santuario Xml Security For Java 1.3.0Apache Santuario Xml Security For Java 1.4.5Apache Santuario Xml Security For Java 1.4.4Apache Santuario Xml Security For Java 1.5.1Apache Santuario Xml Security For Java 1.4.8Apache Santuario Xml Security For Java 1.4.6Apache Santuario Xml Security For Java 1.4.0Apache Santuario Xml Security For Java 1.5.2Apache Santuario Xml Security For Java 1.5.4Apache Santuario Xml Security For Java 1.5.3Apache Santuario Xml Security For Java 1.4.7Apache Santuario Xml Security For Java 1.5.0Apache Santuario Xml Security For Java 1.2.1Apache Santuario Xml Security For JavaApache Santuario Xml Security For Java 1.2.0
4.3
CVSSv2
CVE-2013-2172
jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x prior to 1.4.8 and 1.5.x prior to 1.5.5 allows context-dependent malicious users to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrar...
Apache Santuario Xml Security For Java 1.5.1Apache Santuario Xml Security For Java 1.5.2Apache Santuario Xml Security For Java 1.5.4Apache Santuario Xml Security For Java 1.5.3Apache Santuario Xml Security For Java 1.4.7Apache Santuario Xml Security For Java 1.5.0
5
CVSSv2
CVE-2014-8152
Apache Santuario XML Security for Java 2.0.x prior to 2.0.3 allows remote malicious users to bypass the streaming XML signature protection mechanism via a crafted XML document.
Apache Santuario Xml Security For Java 2.0.2Apache Santuario Xml Security For Java 2.0.1Apache Santuario Xml Security For Java 2.0.0
NA
CVE-2023-44483
All versions of Apache Santuario - XML Security for Java before 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are re...
Apache Santuario Xml Security For Java
1.9
CVSSv2
CVE-2019-12400
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader...
Apache Santuario Xml Security For JavaRedhat Jboss Enterprise Application Platform 7.2Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0
7.5
CVSSv2
CVE-2019-17570
An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maint...
Apache Xml-rpc 3.1.3Apache Xml-rpc 3.1.2Apache Xml-rpc 3.1Apache Xml-rpc 3.1.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Fedoraproject Fedora 31Fedoraproject Fedora 32Redhat Software Collections 1.0
5
CVSSv2
CVE-2022-21496
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e...
Oracle Graalvm 20.3.5Oracle Graalvm 21.3.1Oracle Graalvm 22.0.0.2Oracle Java Se 18Oracle Java Se 7u331Oracle Java Se 8u321Oracle Java Se 11.0.14Oracle Java Se 17.0.2Netapp Element Software -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Cloud Insights Acquisition Unit -Netapp Cloud Secure Agent -Netapp Bootstrap Os -Debian Debian Linux 9.0Azul Zulu 7.52
2.1
CVSSv2
CVE-2012-1717
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and previous versions, 6 update 32 and previous versions, 5 update 35 and previous versions, and 1.4.2_37 and previous versions allows local users to affect confidentiality via ...
Oracle JreOracle Jre 1.5.0Oracle Jre 1.6.0Oracle Jre 1.7.0Oracle JdkOracle Jdk 1.5.0Oracle Jdk 1.6.0Oracle Jdk 1.7.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux For Scientific Computing 6.0Redhat Enterprise Linux For Power Big Endian 5.0Redhat Enterprise Linux Server Aus 6.2Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux For Ibm Z Systems 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 6.2Redhat Enterprise Linux Server From Rhui 6.0Redhat Satellite With Embedded Oracle 5.5Redhat Icedtea6
4.3
CVSSv2
CVE-2022-21443
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Dif...
Oracle Graalvm 20.3.5Oracle Graalvm 21.3.1Oracle Graalvm 22.0.0.2Oracle Java Se 18Oracle Java Se 7u331Oracle Java Se 8u321Oracle Java Se 11.0.14Oracle Java Se 17.0.2Netapp Element Software -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Cloud Insights Acquisition Unit -Netapp Cloud Secure Agent -Netapp Bootstrap Os -Debian Debian Linux 9.0Debian Debian Linux 10.0
9.3
CVSSv2
CVE-2010-3333
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote malicious users to execute arbitrary code via crafted RTF data, aka &...
Microsoft Office XpMicrosoft Open Xml File Format ConverterMicrosoft Office 2008Microsoft Office 2011Microsoft Office 2010Microsoft Office 2004Microsoft Office 2003Microsoft Office 2007
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook