CVE-2016-9707

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

NetIQ Access Manager Information Disclosure Vulnerability

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all your Web access needs. An information disclosure vulnerability exists in NetIQ Access Manager. The vulnerability is caused due to ineffective filtering of incoming XML requests when parsed by the NAM Identity...

Design/Logic Flaw

XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...

CVE-2016-4931

XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...

CVE-2016-4931

XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...

CVE-2016-4931

CVE-2016-4931 affects Juniper Networks Junos Space prior to 15.2R2. The issue is an XML External Entity (XXE) injection in the product, allowing an attacker to trigger a denial of service. Public records consistently describe the vulnerability as an XML entity injection that can cause service dis...

CVE-2016-4931

XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...

Windows DVD Maker 6.1.7 - XML External Entity Injection Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: =================...

USB Pratirodh XML External Entity Injection Vulnerability

USB Pratirodh is a free security tool from C-DAC to control the use of removable USB storage media. USB Pratirodh suffers from an XML external entity injection vulnerability. An attacker could exploit the vulnerability to obtain sensitive information or launch a denial of service attack...

Xxe

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 1999537...

CVE-2016-9724

CVE-2016-9724 affects IBM QRadar SIEM (7.2.x). The vulnerability is an XML External Entity (XXE) processing flaw in XML data handling, which can lead to information disclosure and a denial of service by consuming memory resources. The IBM and NVD entries describe a remote attacker exploiting XXE ...

Aruba AirWave Management Platform XML External Entity Injection Vulnerability

Aruba AirWave is Aruba's suite of network management software for multi-vendor management systems that provides end-to-end monitoring capabilities to improve network operations and manage RF security, as well as real-time monitoring and proactive alerting and reporting. AirWave Management Platfor...

Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scripting Vulnerabilities

Exploit for hardware platform in category web applications title: XML External Entity Injection XXE, Reflected Cross Site Scripting product: Aruba AirWave vulnerable version: =8.2.3 fixed version: 8.2.3.1 CVE number: CVE-2016-8526, CVE-2016-8527 impact: high homepage: http://www.arubanetworks.com...

Aruba AirWave 8.2.3 - XML External Entity Injection Cross-Site Scripting

Aruba AirWave 8.2.3 - XML External Entity Injection Cross-Site Scripting SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XML External Entity Injection XXE, Reflected Cross Site Scripting product: Aruba AirWave vulnerab...

CVE-2016-8974

IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference ...

Xxe

IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference ...

IBM Rational Rhapsody Design Manager XML External Entity Injection Vulnerability

IBM Rational Rhapsody Design Manager is a Jazz-based platform from IBM that helps systems engineers apply Model-Based Systems Engineering MBSE through SysML to help embedded software developers dismantle engineering silos and collaborate with key stakeholders, such as managers, quality managers,...

Grails PDF Plugin 0.6 - XML External Entity Injection

Grails PDF Plugin 0.6 - XML External Entity Injection Exploit Title: Grails PDF Plugin 0.6 XXE Date: 21/02/2017 Vendor Homepage: http://www.grails.org/plugin/pdf Software Link: https://github.com/aeischeid/grails-pdfplugin Exploit Author: Charles FOL Contact: https://twitter.com/ambionics Website...

Grails PDF Plugin 0.6 - XML External Entity Injection

Exploit Title: Grails PDF Plugin 0.6 XXE Date: 21/02/2017 Vendor Homepage: http://www.grails.org/plugin/pdf Software Link: https://github.com/aeischeid/grails-pdfplugin Exploit Author: Charles FOL Contact: https://twitter.com/ambionics Website: https://www.ambionics.io/blog/grails-pdf-plugin-xxe...

eParakstitajs and eParaksts XML External Entity Injection Vulnerabilities

e-Me eParakstitajs is a software developed by AIT Microsoft Glossaries Team in the category Miscellaneous Shareware. An XML External Entity Injection vulnerability exists in eParakstitajs and eParaksts. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial...