https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 19:18:12 +0000 https://db.gcve.eu/vuln/cve-2020-10683 <p>dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.</p> <p>dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.</p> https://db.gcve.eu/vuln/cve-2020-10683 https://db.gcve.eu/vuln/usn-4575-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dom4j</p> <p>It was discovered that dom4j incorrectly handled reading XML data. A remote attacker could exploit this with a crafted XML file to expose sensitive data or possibly execute arbitrary code. (CVE-2020-10683)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dom4j</p> <p>It was discovered that dom4j incorrectly handled reading XML data. A remote attacker could exploit this with a crafted XML file to expose sensitive data or possibly execute arbitrary code. (CVE-2020-10683)</p> https://db.gcve.eu/vuln/usn-4575-1