336 matches found
Automated Logic Corporation Multiple Device XML External Entity Vulnerability
Automated Logic provides a full range of building MEP control systems for a wide range of users, including central air conditioning automation, variable power distribution monitoring, water supply and drainage monitoring, lighting monitoring and elevator monitoring. The system has been widely use...
SUSE-SU-2017:2299-1 Security update for expat
This update for expat fixes the following issues: - CVE-2016-9063: Possible integer overflow to fix inside XMLParse leading to unexpected behaviour bsc1047240 - CVE-2017-9233: External Entity Vulnerability could lead to denial of service bsc1047236...
CVE-2017-11390
XML external entity XXE processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-4706...
CVE-2017-9233
XML External Entity vulnerability in libexpat 2.2.0 and earlier Expat XML Parser Library allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD...
PSF-2017-7 Expat 2.2.1
XML External Entity vulnerability in libexpat 2.2.0 and earlier Expat XML Parser Library allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD...
OSCI Transport Library OSCI-Transport XXE vulnerability
OSCI Transport Library Java is a Java library of mandatory transport protocols for German e-government, and OSCI Transport Library .NET is its .NET version.OSCI-Transport is one of the XML-based transport protocols. An XML external entity injection vulnerability exists in OSCI Transport Library...
CVE-2015-7326
XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...
Multiple Hitachi Products XML External Entity Information Disclosure Vulnerability
Hitachi Device Manager is a suite of mobile device management software; Replication Manager is a suite of data replication software that simplifies Hitachi storage systems. An XML external entity information disclosure vulnerability exists in multiple Hitachi products. A remote attacker could...
XXE Vulnerability in KnowledgeSort.asmx File of MicroXia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. A XXE vulnerability exists in the KnowledgeSort.asmx file of MicroXia Online Learning Platform, which can be exploited by an attacker to remotely read arbitrary files from the server...
Cisco WebEx Meetings Server XML External Entity Information Disclosure Vulnerability
Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An XML external entity information disclosure vulnerability exists in Cisco WebEx Meetings Server. Due to the progr...
WPS-Text has XXE vulnerability in docx parsing
WPS-Text is an office software. WPS-Text suffers from an XXE vulnerability in docx parsing. This allows attackers to exploit the vulnerability to cause the disclosure of sensitive user information as well as a DoS Denial of Service on the user's system...
Cimetrics BACnet Explorer 4.0 - XML External Entity Injection Vulnerability
Exploit for windows platform in category local exploits Cimetrics BACnet Explorer 4.0 XXE Vulnerability Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 4.0.0.0 Summary: The BACnet Explorer is a BACnet client application that helps auto discover BACnet devices...
CVE-2015-7743
XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...
CVE-2016-5851
python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted document...
Microsoft Excel Starter 2010 XML External Entity Vulnerability
Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ============================ Microsoft Excel Starter 2010 EXCELC.EXE / "OFFICEVIRT.EXE" This is a bundled Excel "starter" version that comes 'pre-loaded'...
perl-Image-Info XML External Entity Injection Vulnerability
perl-Image-Info extracts meta information from various types of image files. perl-Image-Info suffers from an XML external entity injection vulnerability that can be exploited by attackers to obtain sensitive information or cause a denial of service condition...
SAP NetWeaver Application Server Java XML External Entity Denial of Service Vulnerability
SAP NetWeaver Application Server AS Java is an application server that runs in NetWeaver and is based on the Java programming language. A denial of service vulnerability exists in SAP NetWeaver Application Server Java. An attacker could exploit the vulnerability to cause a denial of service...
CVE-2016-3039
IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
python-docx XML External Entity Vulnerability
python-docx is a python library for editing and generating Microsoft Word documents. An XML external entity vulnerability exists in python-docx version 0.8.5. An attacker can exploit this vulnerability to conduct an XML external entity attack...