Microsoft Windows EMET XML External Entity Injection Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by the American company Microsoft Microsoft, Enhanced Mitigation Experience Toolkit is a free security toolkit for Microsoft Windows. An XML external entity injection vulnerability exists in Microsoft Windows EMET, which...

PT-2018-11466 · Webgrind · Webgrind

Name of the Vulnerable Software and Affected Versions: Webgrind version 1.5 Description: The issue allows anyone to view files from the local filesystem that the webserver user has access to. This is achieved by manipulating the file parameter in the /index.php API endpoint, specifically through...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

Design/Logic Flaw

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

CVE-2018-1000535 concerns LMS, where versions up to and including LMS_011123 expose a Local File Disclosure in the LMS module’s file-reading functionality. The vulnerability can allow reading server files and is reported to be exploitable via a GET parameter. The issue’s impact is described as pa...

CVE-2018-1000535: Exposure of Sensitive Information to an Unauthorized Actor

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

PT-2018-9431

Name of the Vulnerable Software and Affected Versions LMS versions = LMS 011123 Description The issue is related to a Local File Disclosure vulnerability in the File reading functionality of the LMS module. This can result in the possibility of reading files on the server. The attack appears to b...

CVE-2018-5181

If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with...

CVE-2017-5387: Insertion of Sensitive Information into Externally-Accessible File or Directory

The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a " " tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox 51...

PT-2018-10133

Name of the Vulnerable Software and Affected Versions ModbusPal version 1.6b Description The issue allows for an XML External Entity XXE attack. This occurs because projects and automations are saved in XML-based files .xmpp and .xmpa respectively, which are susceptible to XXE injection. By sendi...

CVE-2018-10832: Improper Restriction of XML External Entity Reference

ModbusPal 1.6b is vulnerable to an XML External Entity XXE attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in ModbusPal, will retu...

Xen CDROM Image Handling Local File Disclosure Vulnerability (XSA-258)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a local file disclosure vulnerability. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patche...

UBUNTU-CVE-2017-15691

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...

DEBIAN-CVE-2017-15691

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...

CVE-2017-15691

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...

PT-2018-5970

Name of the Vulnerable Software and Affected Versions: Apache uimaj versions prior to 2.10.2 Apache uimaj 3.0.0-xxx versions prior to 3.0.0-beta Apache uima-as versions prior to 2.10.2 Apache uimaFIT versions prior to 2.4.0 Apache uimaDUCC versions prior to 2.2.2 Description: The issue relates to...

CVE-2017-15691: Improper Restriction of XML External Entity Reference

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...