608 matches found
SUSE-SU-2017:1813-1 Security update for libxml2
This update for libxml2 fixes the following issues: Security issues fixed: CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 CVE-2017-7375: Prevented an unwanted external entity reference bsc1044894...
openSUSE Security Update : libxml2 (openSUSE-2017-793)
This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2017-7376: Increase buffer space for port in HTTP redirect support bsc1044887 - CVE-2017-7375: Prevent unwanted external entity reference bsc1044894 This update was imported from the SUSE:SLE-12-SP2:Update update...
CVE-2015-7326: Improper Restriction of XML External Entity Reference
XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...
PT-2023-10261 · Libplist +2 · Libplist +2
Name of the Vulnerable Software and Affected Versions: libplist version 1.12 Description: A problematic issue has been found in the XML Handler component of libplist, specifically affecting the plist from xml function in the src/xplist.c file. This issue leads to an xml external entity reference...
CVE-2017-3548: Improper Restriction of XML External Entity Reference
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2016-7051: Improper Restriction of XML External Entity Reference
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
CVE-2015-7273: Improper Restriction of XML External Entity Reference
Dell Integrated Remote Access Controller iDRAC 7/8 before 2.21.21.21 has XXE...
CVE-2012-3489: Improper Restriction of XML External Entity Reference
The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...