https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T19:18:12.335550+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2020-10683 CVE-2020-10683 2026-11-06T19:18:12.353187+00:00

dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.

 https://db.gcve.eu/vuln/usn-4575-1 USN-4575-1 — dom4j vulnerability 2026-11-06T19:18:12.353255+00:00

Affected: Ubuntu:16.04:LTS: dom4j

It was discovered that dom4j incorrectly handled reading XML data. A remote attacker could exploit this with a crafted XML file to expose sensitive data or possibly execute arbitrary code. (CVE-2020-10683)