Search Vulnerabilities

fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

XEE in Ivanti Connect Secure before 22

XML Entity Expansion vulnerability in run-llama/llama_index

An attacker with access to an HX 10

REXML denial of service vulnerability

Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference

Pre-authenticated XXE injection

Pre-authenticated Time-Based Blind XXE injection

Billion Laughs Attack leading to DoS in langchain-ai/langchain

PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT

Kirby XML External Entity (XXE) vulnerability in the XML data handler

kaml has potential denial of service while parsing input with anchors and aliases

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML ...

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10

Opencast vulnerable to billion laughs attack (XML bomb)

Cisco Firepower Management Center XML Entity Expansion Vulnerability

Feedgen Vulnerable to XML Denial of Service Attacks

XML Entity Expansion (Billion Laughs Attack) on Pippo 1