10096 matches found
BIT-LIBPYTHON-2022-48565
An XML External Entity XXE issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities...
Adobe Experience Manager XML Entity Injection Vulnerability (CNVD-2025-21172)
Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. Adobe Experience Manager suffers from an XML entity injection...
PT-2025-32588 · Unknown · Open-Kilda
Name of the Vulnerable Software and Affected Versions: OpenKilda versions prior to 1.164.0 Description: OpenKilda, an open-source OpenFlow controller, contains an XML external entity XXE injection vulnerability. This vulnerability, in combination with GHSL-2025-024, allows unauthenticated attacke...
open-kilda 代码问题漏洞
open-kilda is an OpenFlow controller open-sourced by Telstra. A code issue vulnerability exists in versions prior to open-kilda 1.164.0, which stems from XML external entity injection and could lead to information disclosure...
TencentOS Server 2: expat (TSSA-2025:0543)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0543 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2024-40896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers t...
CVE-2025-8355
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery SSRF...
CVE-2025-8355
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery SSRF...
CVE-2025-8355
CVE-2025-8355 affects Xerox FreeFlow Core 8.0.4. It is an XML parsing XXE issue that enables SSRF by referencing internal URLs in crafted XML sent to jmfclient.jar. CVSS metrics point to HIGH impact with potential confidentiality exposure but no explicit code integrity/availability impact. Xerox ...
CVE-2025-8355 XXE leading to SSRF
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery SSRF...
PT-2025-32364 · Xerox · Xerox Freeflow Core
Name of the Vulnerable Software and Affected Versions: Xerox FreeFlow Core version 8.0.4 Description: Improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, resulting in a Server-Side Request Forgery SSRF...
Security Bulletin: Vulnerabilities in SAXBuilder affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerability in SAXBuilder has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2021-33813 DESCRIPTION: An XX...
Adobe Experience Manager 6.0.0.0 < 6.5.24.0 Multiple Vulnerabilities (APSB25-82)
The version of Adobe Experience Manager installed on the remote host is prior to 6.5.24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-82 advisory. - Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External...
CVE-2025-54254
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...
CVE-2025-54254
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...
CVE-2025-54254 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...
CVE-2025-54254 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...
Adobe Experience Manager 代码问题漏洞
Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. Adobe Experience Manager suffers from an XML entity injection...