Archive
24 March 2017
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 5.5
Improper Restriction of Recursive Entity References in DTDs in Apache POI
Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.