PI
Vendor
Pippo
1 product with CVEs on record
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-5442
PI
Pippo
Pippo
7.5
1%
Jun 12XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken
CVE-2018-20059
PI
Pippo
Pippo
9.8
2%
Dec 11jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE
CVE-2018-18628
PI
Pippo
Pippo
9.8
5%
Oct 23An issue was discovered in Pippo 1.11.0
CVE-2017-18349
PI
Pippo
Pippo
9.8
39%
Oct 23parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request,…
CVE-2018-18240
PI
Pippo
Pippo
9.8
4%
Oct 11Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection…