Lucene search
+L

11453 matches found

SUSE Linux
SUSE Linux
•added 2024/11/26 5:06 a.m.•23 views

Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop

This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: Security issues fixed: CVE-2024-28168: Fixed improper restriction of XML External Entity XXE reference bsc1231428 Upstream...

6.8CVSS8AI score0.01038EPSS
SaveExploits0References6
osv_suse
osv_suse
•added 2024/11/26 5:05 a.m.•21 views

SUSE-SU-2024:4054-1 Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop

This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: - Security issues fixed: CVE-2024-28168: Fixed improper restriction of XML External Entity XXE reference bsc1231428 -...

7.5CVSS7.8AI score0.01038EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•28 views

Hewlett Packard Enterprise Insight Remote Support security vulnerabilities

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

7.5CVSS6.8AI score0.46671EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•29 views

Hewlett Packard Enterprise Insight Remote Support security vulnerabilities

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

7.5CVSS8AI score0.83629EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•28 views

PT-2024-17143 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support affected versions not specified Description: An XML external entity injection XXE issue may allow remote users to disclose information in certain cases. This issue is related to XML external entity processing and ca...

7.5CVSS7.2AI score0.01515EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•26 views

PT-2024-35805 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support affected versions not specified Description: A vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases due to an XML external entity injection XXE issue. This coul...

7.5CVSS7.2AI score0.46671EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•9 views

CVE-2024-53674: XML Injection (aka Blind XPath Injection)

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

7.5CVSS7.3AI score0.46671EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•23 views

Hewlett Packard Enterprise Insight Remote Support security vulnerabilities

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

7.5CVSS6.6AI score0.01515EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/25 1:32 a.m.•11 views

Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/11/22 8:17 p.m.•23 views

Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2017-15691

Summary Apache uimaj-core.jar security vulnerability CVE-2017-15691 in FileNet Content Manager FNCM Content Search Services CSS/Enterprise Content Management Text Search ECMTS. CSS/ECMTS is affected and is potentially vulnerable. Vulnerability Details CVEID:CVE-2017-15691 DESCRIPTION: Apache uima...

6.5CVSS5.8AI score0.08855EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/11/22 4:15 p.m.•32 views

CVE-2023-24466

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200...

9.8CVSS0.00535EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/22 4:15 p.m.•19 views

CVE-2023-24466

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200...

9.8CVSS5.7AI score0.00535EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/22 3:34 p.m.•37 views

CVE-2023-24466 Possible XML External Entity Injection in OpenText iManager

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200...

7.5CVSS0.00535EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/22 3:34 p.m.•80 views

CVE-2023-24466

CVE-2023-24466 affects OpenText iManager 3.2.6.0200 with a possible XML External Entity Injection via the iManager GET parameter. The vulnerability is described across multiple sources as enabling an attack with high impact on confidentiality, integrity, and availability (per NVD and related CVSS...

9.8CVSS7.6AI score0.00535EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/22 3:34 p.m.•18 views

CVE-2023-24466 Possible XML External Entity Injection in OpenText iManager

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200...

7.5CVSS7AI score0.00535EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/22 12:00 a.m.•15 views

PT-2024-35806 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support affected versions not specified Description: An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. Recommendations: At the...

7.5CVSS6.4AI score0.83629EPSS
SaveExploits1References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•6 views

CVE-2023-24466: Improper Restriction of XML External Entity Reference

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200...

9.8CVSS5.7AI score0.00535EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•22 views

OpenText iManager security vulnerabilities

OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager version 3.2.6.0200, which stems from possible XML external entity injection in iManager...

9.8CVSS7.2AI score0.00535EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/22 12:00 a.m.•20 views

PT-2024-12037 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A possible XML External Entity Injection issue has been discovered in the iManager GET parameter. This could potentially allow for malicious activities. Recommendations: For OpenText iManager...

9.8CVSS7.3AI score0.00535EPSS
SaveExploits0References3
Tibco
Tibco
•added 2024/11/19 6:46 p.m.•33 views

TIBCO Security Advisory: November 19, 2024 - TIBCO API Exchange Gateway - CVE-2024-10514

TIBCO APIX - XML External Entity XXE Injection Vulnerability Original release date: November 19, 2024 Last revised: --- CVE-2024-10514 Source: TIBCO Software Inc. Products Affected TIBCO API Exchange Gateway 2.4.0 and 2.5.0 Component Affected API Exchange Gateway Description The TIBCO API Exchang...

5.9AI score
SaveExploits0
Rows per page
Query Builder