Lucene search
+L

20307 matches found

Cvelist
Cvelist
•added 2024/11/08 10:28 p.m.•35 views

CVE-2024-52007 XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...

8.6CVSS0.00899EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/11/08 6:49 p.m.•29 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

Summary XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external...

8.6CVSS6.9AI score0.00899EPSS
SaveExploits0References8Affected Software6
OSV
OSV
•added 2024/11/08 6:49 p.m.•19 views

GHSA-GR3C-Q7XF-47VH XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

Summary XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external...

8.6CVSS8.2AI score0.00899EPSS
SaveExploits0References8
OSV
OSV
•added 2024/11/08 11:15 a.m.•12 views

CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

8.1CVSS5.8AI score0.02385EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/08 11:15 a.m.•26 views

CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

8.5CVSS0.02385EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/08 10:58 a.m.•74 views

CVE-2024-10839

CVE-2024-10839 affects Zohocorp/ManageEngine SharePoint Manager Plus (versions 4503 and prior). The vulnerability is an authenticated XML External Entity (XXE) issue in the Management option. Impact is described as high confidentiality impact and partial availability impact per the NVD metrics. N...

8.5CVSS8.1AI score0.02385EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/08 10:58 a.m.•16 views

CVE-2024-10839 XML External Entity

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

8.5CVSS6.7AI score0.02385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/08 10:58 a.m.•36 views

CVE-2024-10839 XML External Entity

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

8.5CVSS0.02385EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/08 8:41 a.m.•14 views

Malicious code in autolink-jira-issue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d899824dec6a9efaddf4482f495ca1b557fc0ec18d4371e0214c6397fd95ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNVD
CNVD
•added 2024/11/08 12:00 a.m.•9 views

XML Entity Injection Vulnerability in Secure Data Exchange System of Shenzhen UnitedSoft Technology Co.

Ltd. "LianSoft" was founded in 2004, focusing on enterprise-level network security market, providing network security products and services for government and enterprise customers, to create a network access control, terminal security management, data leakage prevention products such as integrate...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/11/08 12:00 a.m.•16 views

PT-2024-16580 · Zoho · Zoho Manageengine Sharepoint Manager Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine SharePoint Manager Plus versions 4503 and prior Description: The issue is an authenticated XML External Entity XXE vulnerability in the Management option. This vulnerability impacts specific versions of the software, allowing...

8.5CVSS7AI score0.02385EPSS
SaveExploits0References30
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/08 12:00 a.m.•28 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

8.6CVSS8.4AI score0.00899EPSS
SaveExploits0References9
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/08 12:00 a.m.•35 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

8.6CVSS8.4AI score0.00899EPSS
SaveExploits0References9
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/08 12:00 a.m.•27 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

8.6CVSS8.4AI score0.00899EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•2 views

CVE-2024-52007: Improper Restriction of XML External Entity Reference

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...

8.6CVSS7.5AI score0.00899EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/08 12:00 a.m.•17 views

PT-2024-34534 · Unknown · Powertac-Server

Name of the Vulnerable Software and Affected Versions: powertac-server version 1.9.0 Description: An XML External Entity XXE vulnerability in the component DocumentBuilderFactory allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing...

9.8CVSS8AI score0.01043EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•2 views

CVE-2024-10839: Improper Restriction of XML External Entity Reference

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

8.5CVSS5.8AI score0.02385EPSS
SaveExploits0References1
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/08 12:00 a.m.•31 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

8.6CVSS8.4AI score0.00899EPSS
SaveExploits0References9
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/08 12:00 a.m.•36 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

8.6CVSS8.4AI score0.00899EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•14 views

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. It helps you manage, audit, and report on your local and Office 365 SharePoint environments. It also allows you to monitor, track and analyze all activities in your SharePoint infrastructure t...

8.5CVSS6.5AI score0.02385EPSS
SaveExploits0References1
Rows per page
Query Builder