PI
Vendor
Pippo
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-5442 | PI Pippo Pippo | 7.5 | Jun 12 | XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken |
| CVE-2018-20059 | PI Pippo Pippo | 9.8 | Dec 11 | jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE |
| CVE-2018-18628 | PI Pippo Pippo | 9.8 | Oct 23 | An issue was discovered in Pippo 1.11.0 |
| CVE-2017-18349 | PI Pippo Pippo | 9.8 | Oct 23 | parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request,… |
| CVE-2018-18240 | PI Pippo Pippo | 9.8 | Oct 11 | Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection… |
