21032 matches found
MAL-2023-1462 Malicious code in square-apple-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9fccff4670e174a264245cd74f260281cf3cbd751f4a24bb9516c4b1038a35d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cloud-room-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7995bf141e79ead6fc8464a011cc856eb05c0c23ba1855b002b45a7e60002c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1457 Malicious code in cloud-room-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7995bf141e79ead6fc8464a011cc856eb05c0c23ba1855b002b45a7e60002c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
entity-health.com Cross Site Scripting vulnerability OBB-3578637
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-2QC8-R663-V864 OpenNMS Horizon XXE Injection Vulnerability
XXE injection in /rtc/post/ endpoint in OpenNMS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...
Xxe
XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...
CVE-2023-0871
Affected product: OpenNMS Horizon (OpenNMS Horizon). Vulnerability: XXE injection in the /rtc/post/ endpoint. Root cause: XML external entity handling allows an attacker to cause Horizon to fetch arbitrary resources. Versions affected: Horizon 31.0.8 and earlier than 32.0.2 on multiple platforms....
CVE-2023-0871 An XML External Entity injection vulnerability
XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...
CVE-2023-0871 An XML External Entity injection vulnerability
XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...
MAL-2023-1447 Malicious code in hsqwe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6af02b8a41a1ba2a2897c59a9bfe66780bc83afc705127d53c22c2d463c74bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1446 Malicious code in horaw (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a180f896e2dd432d2280836c5441fce0ad50a403d3c7f2e6340a91addaabf9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-3823 Security issue with external entity loading in XML without enabling it
In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...
MAL-2023-1445 Malicious code in fiji-core-pal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b28ba0a33259d58a30bc38f6d3444c0677f33e3eda42538f3a1114a9191e7ce0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2023-16575 · Opennms · Meridian +1
Name of the Vulnerable Software and Affected Versions: OpenNMS Horizon versions 31.0.8 through 32.0.2 Description: The issue is related to an XML external entity XXE injection vulnerability in the /rtc/post/ endpoint, which can be used to force Horizon to make arbitrary HTTP requests to internal...
CVE-2023-3823: Improper Restriction of XML External Entity Reference
In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...
PHP Code Issues Vulnerabilities
PHP is a scripting language for PHP that executes on the server side. PHP suffers from a code issue vulnerability that stems from loading external entities without XML enabled, resulting in a local file disclosure. Affected products and versions: PHP version 8.0 prior to 8.0.30, version 8.1 prior...
CVE-2023-32567
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...
CVE-2023-32567
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...
