Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libqt4-designer package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

JBPM jbpm-designer XML External Entity Vulnerability

JBPM full name Java Business Process Management, Business Process Management is a set of open source executable process language framework. jbpm-designer is one of the Web-based jBPM process design tool . JBPM jbpm-designer version 6.0.x and 6.2.x version of the...

CVE-2014-3682

XML external entity XXE vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file...

Xxe

XML external entity XXE vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file...

CVE-2014-3682

CVE-2014-3682 affects jbpm-designer 6.0.x and 6.2.x, due to an XML External Entity (XXE) vulnerability in JBPMBpmn2ResourceImpl.java that allows reading arbitrary files via a crafted BPMN2 import. Public documents confirm the root cause and impact; Red Hat advisories RHSA-2015:0234/0235 indicate ...

CVE-2014-3682

XML external entity XXE vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file...

CVE-2014-3682

XML external entity XXE vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file...

PT-2015-3732

Name of the Vulnerable Software and Affected Versions jbpm-designer versions 6.0.x through 6.2.x Description The issue allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file, due to an XML external entity XXE vulnerability in t...

CVE-2014-3682: Undefined Security Weakness

XML external entity XXE vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file...

jbpm-designer: XXE in BPMN2 import

An XML External Entity XXE flaw was found in the jbpm-designer BPMN2 import function. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks...

Important: Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.3 security update

Red Hat JBoss BRMS 6.0.3 roll up patch 2, which fixes multiple security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

jbpm-designer: XXE in BPMN2 import

An XML External Entity XXE flaw was found in the jbpm-designer BPMN2 import function. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks...

Lattice-Semiconductor-PAC-Designer-6.21

Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen - http://www.fuzzysecurity.com/ OS: WinXP SP1 Software: http://www.latticesemi.com/products/designsoftware/pacdesigner/index.cfm filename="evil.PAC" PAC1 = """ 1 ispPAC-CLK5410D...

CVE-2011-5293

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument...

Buffer overflow

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the 1 cmdExport, 2 cmdImport, 3 cmdOpen, or 4 cmdSave method...

Design/Logic Flaw

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument...

CVE-2011-5288

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the 1 cmdExport, 2 cmdImport, 3 cmdOpen, or 4 cmdSave method...

CVE-2011-5293

The CVE-2011-5293 entry concerns ThreeDify Designer 5.0.2. The cmdSave method of the ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll allows remote attackers to write to arbitrary files via a pathname argument. Affected product: ThreeDify Designer 5.0.2 (ActiveX control). Vulnerability type...

CVE-2011-5293

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument...

PT-2015-3484

Name of the Vulnerable Software and Affected Versions ThreeDify Designer version 5.0.2 Description The issue is related to multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll. This allows remote attackers to execute arbitrary code via a long argument ...