3942 matches found
CVE-2022-34467
A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...
CVE-2022-34467
CVE-2022-34467 affects Siemens Mendix Excel Importer Module. The vulnerability is an XML Entity Expansion Injection in the Mendix Excel Importer Module (Mendix 8 compatible: all versions < v9.2.2; Mendix 9 compatible: all versions
Siemens Mendix Excel Importer Module 安全漏洞
The Mendix Excel Importer Module can import Excel data tables into Mendix applications. an XML entity extension injection vulnerability exists in the Siemens Mendix Excel Importer Module, which can be exploited by an attacker to compromise the availability of affected components...
Siemens Mendix Excel Importer
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Mendix Excel Importer Module Vulnerability: XML Entity Expansion 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to compromise the...
CODESYS 安全漏洞
CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in several CODESYS products, which could be exploited by a remote attacker to craft a request that could result in an unexpected symbol expansion, leading to a denial of service...
CVE-2021-40511
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...
CVE-2021-40511
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...
CVE-2021-40511
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...
Design/Logic Flaw
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...
CVE-2021-40511
The CVE concerns OBDA systems Mastro 1.0, vulnerable to XML Entity Expansion (billion laughs) that enables denial of service. The root cause is XML entity expansion handling in Mastro 1.0, enabling resource exhaustion. Documented impact is a denial of service; no public exploit details or patch/v...
CVE-2021-40511
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...
OBDA systems Mastro 安全漏洞
OBDA systems Mastro is a Java tool for ontology-based data access OBDA from OBDA systems, Italy. A security vulnerability exists in OBDA systems Mastro version 1.0 that stems from an XML entity extension attack that is vulnerable to denial of service...
EulerOS 2.0 SP3 : zsh (EulerOS-SA-2022-1778)
According to the versions of the zsh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. Th...
GHSA-CQMR-RCPR-CXH3 Ansible password prompts could expose passwords
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them...
CVE-2020-11462
An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion XEE payload to the XMLRPC based RPC2 interface. The...
expat: Integer overflow in storeRawNames()
An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...
Zend Framework XEE Vulnerability
1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...
GHSA-QRH7-X6FP-C2MP XML Entity Expansion (XEE) in Django
The XML libraries for Python, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute Nova Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack...
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
The security group extension in OpenStack Compute Nova Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664...
GHSA-J6XH-Q826-55JW OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
The security group extension in OpenStack Compute Nova Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664...