CVE-2010-2245

XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document.

• CWE-611

• http://marc.info/?l=wink-user&m=127843482925387&w=2Mailing List, Third Party Advisory
• https://svn.apache.org/repos/asf/wink/trunk/security/CVE-2010-2245.pdfVendor Advisory
• http://marc.info/?l=wink-user&m=127843482925387&w=2Mailing List, Third Party Advisory
• https://svn.apache.org/repos/asf/wink/trunk/security/CVE-2010-2245.pdfVendor Advisory

Published

Aug 8, 2017

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2239Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new i…
• CVE-2010-2240The do_anonymous_page function in mm/memory.c in the Linux k…
• CVE-2010-2241The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts …
• CVE-2010-2242Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules w…
• CVE-2010-2243A vulnerability exists in kernel/time/clocksource.c in the L…7.5
• CVE-2010-2244The AvahiDnsPacket function in avahi-core/socket.c in avahi-…
• CVE-2010-2246feh before 1.8, when the --wget-timestamp option is enabled,…
• CVE-2010-2247makepasswd 1.10 default settings generate insecure passwords7.5
• CVE-2010-2248fs/cifs/cifssmb.c in the CIFS implementation in the Linux ke…
• CVE-2010-2249Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x…6.5
• CVE-2010-2250Drupal 5.x and 6.x before 6.16 uses a user-supplied value in…6.1
• CVE-2010-2251The get1 command, as used by lftpget, in LFTP before 4.0.6 d…