CVE-2020-13692: Improper Restriction of XML External Entity Reference

PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...

Palo Alto Networks PAN-OS 7.1.x < 8.1.13 / 8.0.x < 8.1.13 / 8.1.x < 8.1.13 / 9.0.x < 9.0.7 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.13 or 8.0.x prior to 8.1.13 or 8.1.x prior to 8.1.13 or 9.0.x prior to 9.0.7. It is, therefore, affected by a vulnerability. - Improper restriction of XML external entity reference 'XXE' vulnerability in Pal...

CVE-2020-4195: Improper Restriction of Rendered UI Layers or Frames

IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further...

CVE-2018-1285: Improper Restriction of XML External Entity Reference

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files...

CVE-2020-3310: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the XML parser code of Cisco Firepower Device Manager On-Box software could allow an authenticated, remote attacker to cause an affected system to become unstable or reload. The vulnerability is due to insufficient hardening of the XML parser configuration. An attacker could...

CVE-2020-7452: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r357489, and 11.3-RELEASE before 11.3-RELEASE-p7, incorrect use of a user-controlled pointer in the epair virtual network module allowed vnet jailed privileged users to panic the host system and...

CVE-2020-6827: Improper Restriction of Rendered UI Layers or Frames

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 Working Exploit PoC CVE-202...

Google Chrome Blink UI Frame Restriction

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages is related to improper restrictions on the frames that are displayed in the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created HTML page...

CVE-2020-9444: Improper Restriction of Rendered UI Layers or Frames

Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-LPE SMBGHOST...

CVE-2020-10991: Improper Restriction of XML External Entity Reference

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...

CVE-2020-10993: Improper Restriction of XML External Entity Reference

Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java...

CVE-2020-10990: Improper Restriction of XML External Entity Reference

An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component...

CVE-2020-2171: Improper Restriction of XML External Entity Reference

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2019-20627: Improper Restriction of XML External Entity Reference

AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

aioScanCVE-2020-0796 Introduction The detection speed has...

Design/Logic Flaw

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

CVE-2020-9517

Technical details about CVE-2020-9517 are not publicly available in the provided documents. Monitor for updates from vendors and advisories; current entries describe a UI redress vulnerability in Micro Focus Service Manager Release Control 9.50/9.60 without specifics.

CVE-2020-9517: Improper Restriction of Rendered UI Layers or Frames

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...