Archive

7 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /7 February 2019 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-11788 Public exploit

XML External Entity Reference in Apache Karaf

Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitiga…

Apache Software Foundation Apache Karaf org.apache.karaf.specs:org.apache.karaf.specs.java.xml Maven

Jan 7, 2019