CVE-2012-6685: Improper Restriction of Recursive Entity References in DTDs

Nokogiri before 1.5.4 is vulnerable to XXE attacks...

CVE-2013-5594: Improper Restriction of Rendered UI Layers or Frames

Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding...

CVE-2020-0020: Improper Restriction of Operations within the Bounds of a Memory Buffer

In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-2120: Improper Restriction of XML External Entity Reference

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity XXE attacks...

CVE-2013-4334: Improper Restriction of XML External Entity Reference

opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities...

CVE-2019-10782: Improper Restriction of XML External Entity Reference

All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...

CVE-2020-2105: Improper Restriction of Rendered UI Layers or Frames

REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks...

CVE-2019-19998: Improper Restriction of XML External Entity Reference

Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...

CVE-2019-17440

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

CVE-2019-17440: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

CVE-2019-15930: Improper Restriction of Rendered UI Layers or Frames

Intesync Solismed 3.3sp allows Clickjacking...

CVE-2013-2228: Improper Restriction of Excessive Authentication Attempts

SaltStack RSA Key Generation allows remote users to decrypt communications...

CVE-2015-3166: Improper Restriction of Operations within the Bounds of a Memory Buffer

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, a...

CVE-2019-17085: Improper Restriction of XML External Entity Reference

XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent...

Schneider-electric Concept Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header. File data ot500029.nasl...

Rockwellautomation Micrologix Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors. File data ot500134.nasl...

Schneider-electric M580 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could caus...

Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. File data ot500061.nasl...

Schneider-electric Monitor Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and...