Skip to content
OpenAdvisories

Archive

23 November 2012

Vulnerabilities first published on this day (UTC), newest first.

← October 2012 2012 / November /23 December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2011-5245

    Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

    The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injecti…

    org.jboss.resteasy:resteasy-jaxb-provider Maven
  • Medium —
    CVE-2012-0818

    Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

    RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.

    org.jboss.resteasy:resteasy-client Maven
  • Medium —
    CVE-2010-1330

    Cross-site Scripting in in JRuby

    The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.

    jruby org.jruby:jruby-core Debian Maven