21091 matches found
CVE-2024-47582
CVE-2024-47582 affects SAP NetWeaver Application Server for Java. The root cause is missing validation of XML input, enabling an unauthenticated attacker to send malicious XML to an endpoint, triggering an XML Entity Expansion attack with limited impact on availability. The vulnerability is descr...
CVE-2024-47582 XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application...
CVE-2024-49535: Improper Restriction of XML External Entity Reference
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity...
Adobe Reader < 20.005.30748 / 24.005.20320 Multiple Vulnerabilities (APSB24-92)
The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30748 or 24.005.20320. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a...
PT-2024-33550 · Adobe · Acrobat Reader
Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.005.20307 through 24.001.30193 Acrobat Reader versions 20.005.30730 through 20.005.30710 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference 'XXE' vulnerability...
PT-2024-36012 · Siemens · Comos
Name of the Vulnerable Software and Affected Versions: COMOS V10.3 versions prior to V10.3.3.5.8 COMOS V10.4.0 versions prior to V10.4.0 COMOS V10.4.1 versions prior to V10.4.1 COMOS V10.4.2 versions prior to V10.4.2 COMOS V10.4.3 versions prior to V10.4.3.0.47 COMOS V10.4.4 versions prior to...
PT-2024-32663 · Sap Se · Sap Netweaver As Java
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to missing validation of XML input, which allows an unauthenticated attacker to send malicious input to an endpoint. This leads to ...
Adobe Acrobat < 20.005.30748 / 24.001.30225 / 24.005.20320 Multiple Vulnerabilities (APSB24-92)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30748, 24.001.30225, or 24.005.20320. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier a...
PT-2024-33656 · Siemens · Comos
Name of the Vulnerable Software and Affected Versions: COMOS V10.3 versions prior to V10.3.3.5.8 COMOS V10.4.0 versions prior to V10.4.4.2 COMOS V10.4.1 versions prior to V10.4.4.2 COMOS V10.4.2 versions prior to V10.4.4.2 COMOS V10.4.3 versions prior to V10.4.3.0.47 COMOS V10.4.4 versions prior ...
CVE-2024-49064: Improper Restriction of XML External Entity Reference
Microsoft SharePoint Information Disclosure Vulnerability...
CVE-2024-54005: Improper Restriction of XML External Entity Reference
A vulnerability has been identified in COMOS V10.3 All versions V10.3.3.5.8, COMOS V10.4.0 All versions, COMOS V10.4.1 All versions, COMOS V10.4.2 All versions, COMOS V10.4.3 All versions V10.4.3.0.47, COMOS V10.4.4 All versions V10.4.4.2, COMOS V10.4.4.1 All versions V10.4.4.1.21. The PDMS/E3D...
CVE-2024-47582: Improper Restriction of XML External Entity Reference
Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application...
SAP NetWeaver AS code-related vulnerabilities
SAP NetWeaver AS is an SAP web application server from SAP, Germany. It not only provides web services, but is also the basic platform for SAP software. A code issue vulnerability exists in SAP NetWeaver AS JAVA, which stems from a lack of validation of XML inputs, allowing an unauthenticated...
Siemens Comos code-related vulnerabilities
COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. Siemens COMOS suffers from an XXE injection vulnerability that can be exploited by an...
Siemens Comos code-related vulnerabilities
COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. Siemens COMOS suffers from an XXE injection vulnerability that can be exploited by an...
Adobe Acrobat Reader code vulnerability
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an XML External Entity Injection vulnerability that originates from a network system or product that is not set up with the correct filters ...
unstructured XML External Entity (XXE)
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
XML External Entity (XXE) Injection
Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the XMLParser. An attacker can access sensitive data or cause denial of service by supplying malicious XML content...
