CVE-2014-0171 (jboss_data_virtualization, odata4j)

Leave a reply

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

View Full Alert

Related Posts

  • CVE-2014-10381

    The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. View Full Alert

  • CVE-2014-2727

    The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection. View Full Alert

  • CVE-2014-10376

    The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection. View Full Alert

Leave a Reply