CVE-2022-43512

VBASE Automation Base (VISAM) is affected pre-11.7.5 by CVE-2022-43512 due to improper restriction of XML External Entity references in DBConnections XML parsing. This can disclose information when a valid user opens a specially crafted file; exploitation requires user interaction and is not remo...

CVE-2022-43512 CVE-2022-43512

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-43512 CVE-2022-43512

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-46300

CVE-2022-46300 affects VISAM VBASE Automation Base prior to 11.7.5. Root cause: improper restriction of XML External Entity references (XXE) in GestureConfigurations/XML parsing. Impact: potential information disclosure with user opening a crafted file (local attack surface; confidentiality impac...

CVE-2022-46300 CVE-2022-46300

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

Medium: gstreamer1-plugins-base

Issue Overview: A flaw was found in gstreamer-plugins-base where an out-of-bounds read when handling certain ID3v2 tags is possible. The highest threat from this vulnerability is to system availability. CVE-2021-3522 Affected Packages: gstreamer1-plugins-base Note: This advisory is applicable to...

CVE-2022-46300: Improper Restriction of XML External Entity Reference

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-46286: Undefined Security Weakness

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-45468: Improper Restriction of XML External Entity Reference

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-45121: Improper Restriction of XML External Entity Reference

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-43512: Improper Restriction of XML External Entity Reference

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

VISAM VBASE code-related vulnerabilities

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A code issue vulnerability exists in VISAM VBASE Automation Base prior to version 11.7.5, which stems from an improper restriction on XML external entity references, and can be exploited by an attacker to trick a user int...

PT-2023-14893 · Visam · Visam Vbase Automation Base

Name of the Vulnerable Software and Affected Versions: VISAM VBASE Automation Base versions prior to 11.7.5 Description: The issue may disclose information if a valid user opens a specially crafted file. Recommendations: For versions prior to 11.7.5, update to version 11.7.5 or later to resolve t...

PT-2023-14897 · Visam · Visam Vbase Automation Base

Name of the Vulnerable Software and Affected Versions: VISAM VBASE Automation Base versions prior to 11.7.5 Description: The issue may disclose information if a valid user opens a specially crafted file. This is related to XML External Entity Processing in the context of file parsing, specificall...

VISAM VBASE code-related vulnerabilities

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A code issue vulnerability exists in VISAM VBASE Automation Base versions prior to 11.7.5 that stems from the presence of an information leak...

VISAM VBASE code-related vulnerabilities

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A code issue vulnerability exists in VISAM VBASE Automation Base versions prior to 11.7.5 that stems from the presence of an information leak...

VISAM VBASE code-related vulnerabilities

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A security vulnerability exists in VISAM VBASE Automation Base versions prior to 11.7.5 that stems from the presence of an information leak...

Answer: Cross-site scripting vulnerabilities

answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in answer versions prior to 1.0.7, which stems from stored cross-site scripting XSS...

Answer: Security vulnerabilities

answer is an open source knowledge-based community software. A user enumeration vulnerability exists in versions of answer prior to 1.0.6, which stems from brute-force breaking of a valid email account in the login portal, where the time for a valid account is significantly higher than the time f...

Answer: Security vulnerabilities

answer is an open source knowledge-based community software. An information disclosure vulnerability exists in versions of answer prior to 1.0.6. The vulnerability stems from the fact that the application will respond with an account that cannot be found if an invalid account is used. In the case...