20965 matches found
CVE-2024-4357
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...
CVE-2024-4357
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...
CVE-2024-3486
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution...
CVE-2024-3486
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution...
CVE-2024-4357 XML External Entity Processing Information Disclosure
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...
CVE-2024-4357 XML External Entity Processing Information Disclosure
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...
CVE-2024-4357
Progress Telerik Report Server (versions 10.0.24.305 and earlier, i.e., 2024 Q1) suffers an XML External Entity Processing (XXE) information-disclosure vulnerability in the ValidateMetadaUri path. A low-privilege attacker could read system files; an authenticated context is required but may be by...
CVE-2024-3486 XML External Entity injection vulnerability in iManager
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution...
CVE-2024-3486 XML External Entity injection vulnerability in iManager
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution...
CVE-2024-3486
CVE-2024-3486 describes an XML External Entity (XXE) injection vulnerability in OpenText iManager 3.2.6.0200. Public sources consistently identify the affected component as iManager, with the root cause being an XXE flaw that could enable information disclosure and remote code execution. The NVD ...
NetIQ iManager 代码问题漏洞
NetIQ iManager is an advanced web-based management console from NetIQ UK. Provides customized, secure access to network management utilities and content from any location in the world. A security vulnerability exists in NetIQ iManager version 3.2.6.0200, which stems from the presence of an XML...
CVE-2024-3486: Improper Restriction of XML External Entity Reference
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution...
Progress Software Telerik Report Server 安全漏洞
Progress Software Telerik Report Server is an enterprise-level report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server version 2024 Q1 and prior versions. An attacker exploited the vulnerability to read system...
PT-2024-30601 · Progress · Telerik Report Server
Name of the Vulnerable Software and Affected Versions: Progress Telerik Report Server versions 10.0.24.305 or earlier Description: An information disclosure issue exists, allowing a low-privilege attacker to read system files via XML External Entity Processing. This is related to the...
PT-2024-26235 · Opentext · Opentext Imanager
Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: The issue is related to an XML External Entity injection, which could lead to information disclosure and remote code execution. Recommendations: For OpenText iManager version 3.2.6.0200, at th...
XML Entity Injection Vulnerability in Linkworks Collaborative Office Management Platform at Quanta Technology Co.
Linkworks Collaboration Management Platform is a BIM collaboration platform developed by Quanta. An XML entity injection vulnerability exists in Linkworks Collaborative Office Management Platform of Quanta Technology Corporation, which can be exploited by attackers to obtain sensitive information...
CVE-2024-4357: Improper Restriction of XML External Entity Reference
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...
CVE-2024-34345
The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1...
CycloneDX JavaScript Library 代码问题漏洞
The CycloneDX JavaScript Library is a core feature of the CycloneDX SBOM Standard open source OWASP CycloneDX for JavaScript written in TypeScript. A code issue vulnerability exists in CycloneDX JavaScript Library versions prior to 6.7.1 that stems from XML external entity injection when running...