11456 matches found
EasyTax security vulnerability
EasyTax is a taxpayer tax filing software organized by AG Switzerland. A security vulnerability exists in EasyTax 2023 version 1.2 and earlier, which stems from an XML External Entity XXE vulnerability on multiple platforms, including Windows, Linux, and macOS...
PT-2024-39386 · Unknown · Easy Tax Client
Name of the Vulnerable Software and Affected Versions: Easy Tax Client Software 2023 versions 1.2 and earlier Description: A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software across multiple platforms, including Windows, Linux, and macOS. Recommendations: For...
CVE-2024-9044: Improper Restriction of XML External Entity Reference
A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...
CVE-2024-52800: Improper Restriction of XML External Entity Reference
veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...
XML External Entity (XXE) Injection
HAPI FHIR is vulnerable to XML External Entity XXE Injection. The vulnerability is due to insecure XML parsing by HAPI FHIR, specifically within the XSLT parsing components, which improperly handle external entity references in XML files. It allows attackers to inject malicious XML content, such ...
XML External Entity (XXE)
phpoffice/phpexcel is vulnerable to an XXE XML External Entity. The vulnerability is due to improper parsing of XML data, which allows attackers to inject external entities and potentially access sensitive files or execute malicious code...
Security Bulletin: Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Liberty
Summary Multiple vulnerabilities were addressed in Financial Transaction Manager 4.0.6.0 iFix4 Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External...
Malicious code in pap-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vs-table-plugins-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca3296c3762b2860ae5450c32d26bec2d9e80c794905d8063b43474d5dc16802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11005 Malicious code in shopee-ui-react4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d93b6f2b91bc28c44978dca8e4377993379f07ab89c0ae28f155a92bfcbc21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in json-tree-preview (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0892c74ee2d08c098ac37071b098b7b98d3d6e56f4ed823199117411d0538e4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-53675
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...
CVE-2024-53675
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...
CVE-2024-53674
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...
CVE-2024-53674
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...
CVE-2024-11622
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...
CVE-2024-53675
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...
CVE-2024-53675
An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...