Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2016-3318
ALT-PU-2016-3318: package `apache-poi` update to version 3.12-alt1_2jpp8
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructu ...
GHSA-jqx5-h2hw-5q4f
Denial of Service in Apache POI
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-3529
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers ...
GHSA-q56h-jjj6-52mf
Improper Restriction of XML External Entity Reference in Apache POI
CVE-2014-9527
HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.
CVE-2014-9527
HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.
CVE-2014-9527
HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.
CVE-2014-9527
HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cau ...
CVE-2014-3574
Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
CVE-2014-3574
Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
CVE-2014-3574
Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
CVE-2014-3574
Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote at ...
GHSA-x9mm-6gpf-f749
Loop with Unreachable Exit Condition in Apache POI
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
ALT-PU-2016-3318 ALT-PU-2016-3318: package `apache-poi` update to version 3.12-alt1_2jpp8 | CVSS2: 5 | почти 11 лет назад | ||
CVE-2012-0213 The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document. | CVSS2: 5 | 8% Низкий | больше 14 лет назад | |
CVE-2012-0213 The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document. | CVSS2: 4.3 | 8% Низкий | больше 14 лет назад | |
CVE-2012-0213 The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document. | CVSS2: 5 | 8% Низкий | больше 14 лет назад | |
CVE-2012-0213 The UnhandledDataStructure function in hwpf/model/UnhandledDataStructu ... | CVSS2: 5 | 8% Низкий | больше 14 лет назад | |
GHSA-jqx5-h2hw-5q4f Denial of Service in Apache POI | 8% Низкий | больше 4 лет назад | ||
CVE-2014-3529 The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 4.3 | 13% Средний | около 12 лет назад | |
CVE-2014-3529 The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 5 | 13% Средний | около 12 лет назад | |
CVE-2014-3529 The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 4.3 | 13% Средний | около 12 лет назад | |
CVE-2014-3529 The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers ... | CVSS2: 4.3 | 13% Средний | около 12 лет назад | |
GHSA-q56h-jjj6-52mf Improper Restriction of XML External Entity Reference in Apache POI | 13% Средний | больше 4 лет назад | ||
CVE-2014-9527 HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file. | CVSS2: 5 | 7% Низкий | почти 12 лет назад | |
CVE-2014-9527 HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file. | CVSS2: 4.3 | 7% Низкий | почти 12 лет назад | |
CVE-2014-9527 HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file. | CVSS2: 5 | 7% Низкий | почти 12 лет назад | |
CVE-2014-9527 HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cau ... | CVSS2: 5 | 7% Низкий | почти 12 лет назад | |
CVE-2014-3574 Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack. | CVSS2: 4.3 | 7% Низкий | около 12 лет назад | |
CVE-2014-3574 Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack. | CVSS2: 5 | 7% Низкий | около 12 лет назад | |
CVE-2014-3574 Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack. | CVSS2: 4.3 | 7% Низкий | около 12 лет назад | |
CVE-2014-3574 Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote at ... | CVSS2: 4.3 | 7% Низкий | около 12 лет назад | |
GHSA-x9mm-6gpf-f749 Loop with Unreachable Exit Condition in Apache POI | 7% Низкий | больше 4 лет назад |
Уязвимостей на страницу