CVE-2026-49383

In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible...

CVE-2026-49383: Improper Restriction of XML External Entity Reference

In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible...

The vulnerability of the module for creating and editing user-form templates of the “LOCMAN Designer Form” in the LOCMAN Product Lifecycle Management system lies in its ability to download files of a dangerous type indefinitely, allowing a perpetrator to execute arbitrary code.

The vulnerability of the module responsible for creating and editing user-form templates in the “LOZMAN Designer Form” component of the LOZMAN Product Lifecycle Management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker to execu...

CVE-2017-9427: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\admin\modules\developer\modules\designer\form-create.php. The attacker creates a crafted table name at admin/developer/modules/designer/ and the injection is...