Lucene search
+L

10094 matches found

NVD
NVD
added 2017/03/17 10:59 p.m.28 views

CVE-2017-3811

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054...

6.5CVSS6.2AI score0.01432EPSS
SaveExploits0References3
OSV
OSV
added 2017/03/17 10:59 p.m.10 views

CVE-2017-3811

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054...

6.5CVSS5.8AI score0.01432EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/03/17 10:00 p.m.28 views

CVE-2017-3811

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054...

6.2AI score0.01432EPSS
SaveExploits0References3
CVE
CVE
added 2017/03/17 10:00 p.m.58 views

CVE-2017-3811

CVE-2017-3811 affects Cisco WebEx Meetings Server (CWMS). It is an XML External Entity (XXE) information-disclosure vulnerability where an authenticated, remote attacker can read part of the information stored on the affected system. The underlying issue occurs during XML parsing. Affected releas...

6.5CVSS6.1AI score0.01432EPSS
SaveExploits0References3Affected Software1
exploitpack
exploitpack
added 2017/03/17 12:00 a.m.62 views

Oracle Knowledge Management 12.1.1 12.2.5 - XML External Entity Leading To Remote Code Execution

Oracle Knowledge Management 12.1.1 12.2.5 - XML External Entity Leading To Remote Code Execution SSD Advisory – Oracle Knowledge Management XXE Leading to a RCE Vulnerability Summary The following advisory describe Information Disclosure found in Oracle Knowledge Management version 8.5.1. By...

8.5CVSS0.1AI score0.09689EPSS
SaveExploits3
zdt
zdt
added 2017/03/16 12:00 a.m.104 views

Windows DVD Maker 6.1.7 - XML External Entity Injection Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: =================...

4.3CVSS5.8AI score0.06581EPSS
SaveExploits5
CNVD
CNVD
added 2017/03/16 12:00 a.m.8 views

Microsoft Windows XML External Entity Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. Microsoft Windows suffers from an XML External Entity Information Disclosure vulnerability that can be exploited by an attacker to read sensitive information on the target system...

5.3CVSS6.2AI score0.02059EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/03/16 12:00 a.m.8 views

Cisco WebEx Meetings Server XML External Entity Information Disclosure Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An XML external entity information disclosure vulnerability exists in Cisco WebEx Meetings Server. Due to the progr...

6.5CVSS6.5AI score0.01432EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2017/03/16 12:00 a.m.74 views

Microsoft Windows DVD Maker 6.1.7 - XML External Entity Injection

Microsoft Windows DVD Maker 6.1.7 - XML External Entity Injection + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: =================...

4.3CVSS6.1AI score0.06581EPSS
SaveExploits5
Cisco
Cisco
added 2017/03/15 4:00 p.m.45 views

Cisco WebEx Meetings Server XML External Entity Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. The vulnerability is due to improper handling of an XML External Entity XXE when parsing an XML file. An attacker could exploi...

6.5CVSS6.1AI score0.01432EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/03/15 12:00 a.m.7 views

USB Pratirodh XML External Entity Injection Vulnerability

USB Pratirodh is a free security tool from C-DAC to control the use of removable USB storage media. USB Pratirodh suffers from an XML external entity injection vulnerability. An attacker could exploit the vulnerability to obtain sensitive information or launch a denial of service attack...

9.8CVSS7.1AI score0.03019EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/03/15 12:00 a.m.8 views

IBM Rational Rhapsody Design Manager XML External Entity Injection Vulnerability

IBM Rational Rhapsody Design Manager is a set of collaborative design management software from IBM in the United States. IBM Rational Rhapsody Design Manager suffers from an XML external entity injection vulnerability. A remote attacker could exploit this vulnerability to submit special XML data,...

8.1CVSS7.1AI score0.01963EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2017/03/15 12:00 a.m.32 views

USB Pratirodh XXE Injection

--001a113ff018269a92054ac84a6a Content-Type: text/plain; charset=UTF-8 Vulnerability Title: USB Pratirodh XML External Entity Injection Vulnerability Affected Product: USB Pratirodh Product Homepage: https://cdac.in/index.aspx?id=csepsusbpra CVE-ID : CVE-2017-6895 Severity: Medium Class: XXE...

9.7AI score0.03019EPSS
SaveExploits2
Symantec
Symantec
added 2017/03/14 12:00 a.m.61 views

Microsoft Windows CVE-2017-0043 XML External Entity Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...

2.9CVSS0.1AI score0.02059EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2017/03/07 5:59 p.m.5 views

CVE-2016-9724

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 1999537...

8.1CVSS7.3AI score0.01223EPSS
SaveExploits0References1
Prion
Prion
added 2017/03/07 5:59 p.m.23 views

Xxe

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 1999537...

7.5CVSS7.3AI score0.01223EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2017/03/07 5:00 p.m.54 views

CVE-2016-9724

CVE-2016-9724 affects IBM QRadar SIEM (7.2.x). The vulnerability is an XML External Entity (XXE) processing flaw in XML data handling, which can lead to information disclosure and a denial of service by consuming memory resources. The IBM and NVD entries describe a remote attacker exploiting XXE ...

8.1CVSS8.1AI score0.01223EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2017/03/03 3:59 p.m.18 views

Xxe

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

6.8CVSS6.9AI score0.02133EPSS
SaveExploits0References6
PyPA
PyPA
added 2017/03/03 3:59 p.m.10 views

PYSEC-2017-67

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

9CVSS7.1AI score0.02133EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2017/03/03 3:59 p.m.5 views

DEBIAN-CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

9CVSS8.8AI score0.02133EPSS
SaveExploits0References1
Rows per page
Query Builder