Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-36827

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Dnkorpushov
Products
Ebookmeta
CVE-2024-37388

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Dnkorpushov Lxml
Products
Ebookmeta Lxml