Vulnerabilities (CVE)

Filtered by CWE-91
Total 143 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4857 1 Dlink 2 Dir-865l, Dir-865l Firmware 2026-06-16 7.5 HIGH 9.8 CRITICAL
D-Link DIR-865L has PHP File Inclusion in the router xml file.
CVE-2013-4221 1 Restlet 1 Restlet 2026-06-16 7.5 HIGH N/A
The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.
CVE-2008-5024 3 Canonical, Debian, Mozilla 5 Ubuntu Linux, Debian Linux, Firefox and 2 more 2026-06-16 7.5 HIGH N/A
Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.