CVE-2019-16188

HCL AppScan Source before 9.03.13 is susceptible to XML External Entity XXE attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source, the conte...

CVE-2019-16188

The CVE-2019-16188 issue affects HCL AppScan Source prior to version 9.03.13. It allows XML External Entity (XXE) attacks via a specially crafted .ozasmt file, where, if the victim opens/imports it, the attacker can read local files accessible to the victim and exfiltrate content to a remote list...

CVE-2019-4294

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM...

Command injection

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM...

CVE-2019-4294

CVE-2019-4294 affects IBM DataPower Gateway and IBM MQ Appliance. The root cause is a command-injection vulnerability in which a local attacker could execute arbitrary commands on the targeted system. Affected versions include IBM DataPower Gateway 2018.4.1.0–2018.4.1.6, 7.6.0.0–7.6.0.15, and IBM...

CVE-2018-16188

The CVE-2018-16188 entry describes a SQL injection vulnerability in Ricoh Interactive Whiteboard products (D2200, D5500, D5510, and related displays/controllers). The root cause is an SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affect...

CVE-2017-16188

CVE-2017-16188 affects the reecerver web server. The vulnerability is a directory traversal flaw where a URL containing relative paths (e.g., ../../) leads to filesystem access outside the intended root. Connected advisories describe that affected revisions resolve relative file paths, enabling d...