Skip to content
OpenAdvisories

Archive

22 April 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2019-5427 Public exploit

    Billion laughs attack in c3p0

    c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.