Malicious code in wcebpack-bunde-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a4300818daab208570421a84bcdd8e7b4950dcae1e6a5dd08f17d9e135497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-style-gloder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abaf94f96ee320ed4eff376e9267b0a7428caee6eadbef38504263a396534f43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daeyjds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08daa8db1f03525bec8bbe01df5687ff8e10686d01465fe24003dce21a8711ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in m5d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c0eefe62c7b256b4dce3e00d3a7ec577364f132a34f274a377bea8506c5bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2592 Malicious code in drftjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7731ea5a491675ed634316e383cd87428a37ab2da00dd1e87551fe7f9618ad9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2589 Malicious code in dr3scple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d508fc0838900576e17c54c3a83730379328931b687492e50c12d3e38dfcd41f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2231 Malicious code in createractclass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3a034e25308a4f0909ae6bd9d190557dd6febd0b8de2d96a367e23e157c0073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-15468 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0 through 9.2 Description: The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data, potentially exposing sensitive information or consuming memory resources...

Vulnerability fixed in IBM MQ

IBM has fixed a vulnerability in IBM MQ. Through an XML External Entity Injection XXE, a malicious party can cause a Denial-of-Service by running the MQ environment out of memory run, or gain access to sensitive information. IBM has released updates to fix the vulnerability in MQ 8.0, 9.1 and 9.2...

PT-2022-4347 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge versions 2020 SP2 Patch 04201.2111.1802.0000 Description: The issue is related to the improper restriction of XML External Entity XXE references in the LoadImportedLibraries method, allowing remote attackers to disclose sensitive...

CVE-2022-22489

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

The vulnerability of the pki-core package in the Red Hat Enterprise Linux operating system allows attackers to perform XXE attacks.

The vulnerability of the pki-core package in the Red Hat Enterprise Linux operating system is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...

The vulnerability of the VMware Tools utility set for Windows operating systems allows attackers to execute XXE attacks.

The vulnerability of the VMware Tools utility set for Windows operating systems is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow attackers to execute XXE attacks...

CVE-2022-2838

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests...

PT-2022-8565 · Red Hat · Red Hat Amq Broker

Name of the Vulnerable Software and Affected Versions: Red Hat AMQ Broker affected versions not specified Description: A flaw in Red Hat AMQ Broker allows for a XEE XML External Entity attack via the Broker's configuration files. This can lead to denial of service and information disclosure...

Delta Electronics Delta Robot Automation Studio 代码问题漏洞

Delta Electronics Delta Robot Automation Studio DRAS is industrial robot control software from Delta Electronics, a Taiwan, China-based company. A code issue vulnerability exists in Delta Electronics Delta Robot Automation Studio DRAS, which arises from the possibility that XML documents processe...

CVE-2020-21641

Out-of-Band XML External Entity OOB-XXE vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file...

CVE-2020-21641

Out-of-Band XML External Entity OOB-XXE vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file...

CVE-2020-21641

Out-of-Band XML External Entity OOB-XXE vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file...

dotnet: External Entity Injection during XML signature verification

An information disclosure vulnerability exists in .NET Core and .NET. This issue can lead to unauthorized access to privileged information...