21113 matches found
Akana API Platform code-related vulnerabilities
Akana API Platform is one of Akana's easiest ways to accelerate digital transformation in your organization. A code issue vulnerability exists in Akana API Platform versions prior to 2024.1.0 that stems from the presence of XML External Entity XXE injection...
CVE-2024-3930: Improper Restriction of XML External Entity Reference
In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity XXE was discovered...
MAL-2024-7850 Malicious code in ent-widget-phone (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7313a06ff628db941fa9330887fdea43ce979086e4ce11ef7d0c0041a9a0f9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7847 Malicious code in ent-widget-citizenship (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf62b2434507ed956589c6ccdb8a0361e0f7711f7625eb142f7d046a2dfc20d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7848 Malicious code in ent-widget-dob (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678884e9151ff96ceb375f20f44f7295ed0ea6aac32778e3bf10998c984ad2f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7851 Malicious code in income_access_npm_config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d9955aae12e69e264784bcf65382bde7741326c5841d4a06389474e6daa09b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7852 Malicious code in jayanta_test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38d0a5bc5f220e995ba855c19cc2ae4c1279a34855c7775d4a4b04707b2cdd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7846 Malicious code in dagster-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54576094f59a2d3e54d3be79e476c3b5cc7903ff5c0d5248784ab89ffa4e1dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CosmicSting: Magento Arbitrary File Read (CVE-2024-34102) + PHP Buffer Overflow in the iconv() function of glibc (CVE-2024-2961)
This combination of an Arbitrary File Read CVE-2024-34102 and a Buffer Overflow in glibc CVE-2024-2961 allows for unauthenticated Remote Code Execution on the following versions of Magento and Adobe Commerce and earlier if the PHP and glibc versions are also vulnerable: - 2.4.7 and earlier -...
XML External Entity (XXE) Injection
Apache Drill is vulnerable to XML External Entity XXE Injection. The vulnerability is due to inadequate restriction of external entity references, allowing attackers to access files or execute commands through manipulated XML data...
MAL-2024-7805 Malicious code in httpsflood (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2e3678fb0fcd1e38fa8e38b706128b14d6cd88892b5d2eace1580f584baa8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
VulnCheck KEV: CVE-2019-15637
Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...
GHSA-V62G-JWJ9-RFVX XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...
MAL-2024-7798 Malicious code in smart-input-checkbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d35a2894a65ccf5f422531f46846b2cc71d5e0e28a3e0d7b6e9ed1b0daa6a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Apache Drill code-related vulnerabilities
Apache Drill is an open source software framework from the American company Apache Apache. Apache Drill 1.19.0 and earlier versions suffer from an XML external entity injection vulnerability that can be exploited by an attacker to read any file on a remote file system or execute commands through ...
XML Entity Expansion (XXE)
guardrails-ai is vulnerable to XML Entity Expansion XXE. The vulnerability is due to consuming RAIL documents from external sources, which may cause leakage of internal file data via the SYSTEM entity...
CVE-2024-40075
Laravel v11.x was discovered to contain an XML External Entity XXE vulnerability...
CVE-2024-40075
Laravel v11.x was discovered to contain an XML External Entity XXE vulnerability...
PT-2024-28770 · Laravel · Laravel
Name of the Vulnerable Software and Affected Versions: Laravel versions 11.x Description: The issue is related to an XML External Entity XXE vulnerability. This means that the software may be susceptible to attacks that manipulate XML entities to access unauthorized data or execute system-level...