ILM Informatique jOpenDocument 代码问题漏洞

ILM Informatique jOpenDocument is a document processing library developed by the French company ILM Informatique. Version 1.5 of ILM Informatique jOpenDocument contains a code vulnerability caused by improper restrictions on XML external entity references. This vulnerability may lead to an...

Adobe ColdFusion 代码问题漏洞

Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. Adobe ColdFusion suffers from a code issue vulnerability that arises from improperly restricting XML external entity references, which can be exploited by an attacker to submit a special request, obtain sensitive information o...

libexpat External Entity Code Execution

The vulnerability of the libexpat library for analyzing XML files is related to improper restrictions on links to external XML entities. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

libexpat External Object Reference DoS

The vulnerability of the XML syntax analyzer library libexpat is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially created XML code remotely...

VMware Tools XXE

The vulnerability of the VMware Tools utility set for Windows operating systems is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow attackers to execute XXE attacks...

PgJDBC XXE

The vulnerability of the JDBC driver PgJDBC for connecting Java programs to the PostgreSQL database is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...

org.dom4j.io.SAXReader XML Unauthenticated Access Disclosure

The vulnerability of the new org.dom4j.io.SAXReader method in the library for working with XML, XPath, and XSLT is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Wecon LeviStudioU Information Disclosure Vulnerability

Wecon LeviStudioU is a set of HMI programming software from Wecon Technologies, China. A security vulnerability exists in the handling of project files in Wecon LeviStudioU, which stems from an improper restriction of references to XML external entities. The vulnerability can be exploited by a...