1543 matches found
CVE-2019-14277
Axway SecureTransport 5.x through 5.3 or 5.x through 5.5 with certain API configuration is vulnerable to unauthenticated blind XML injection and XXE in the resetPassword functionality via the REST API. This vulnerability can lead to local file disclosure, DoS, or URI invocation attacks i.e., SSRF...
Axway SecureTransport Code Issue Vulnerability
Axway SecureTransport is a suite of applications for the secure transfer of files and data from the French company Axway. Axway SecureTransport is vulnerable to a code issue. The vulnerability stems from an improperly designed or implemented code development process for a networked system or...
PT-2019-3866
Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x through 2.9.9 Description A Polymorphic Typing issue was discovered in FasterXML jackson-databind. When Default Typing is enabled for an externally exposed JSON endpoint and the service has JDOM 1.x or 2...
uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code
In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...
CVE-2019-4174
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158879...
CVE-2019-12154
XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions...
CVE-2019-12154
XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions...
PT-2019-12664
Name of the Vulnerable Software and Affected Versions RealObjects PDFreactor versions prior to 10.1.10722 Description The issue allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions. Th...
CVE-2019-12154: Improper Restriction of XML External Entity Reference
XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions...
CVE-2019-9157
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...
Arbitrary file deletion
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...
CVE-2019-9157
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...
CVE-2019-9157
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...
CVE-2019-9157
Gemalto DS3 Authentication Server (also known as Ezio Server) contains a Local File Disclosure vulnerability tracked as CVE-2019-9157. The advisory data in the PacketStorm SEC Consult entry indicates vulnerable releases are Ezio DS3 server earlier than v3.1.0, with the fix released in v3.1.0. The...
PT-2019-19401
Name of the Vulnerable Software and Affected Versions Gemalto DS3 Authentication Server version 2.6.1-SP01 Description The issue allows for Local File Disclosure. Recommendations For Gemalto DS3 Authentication Server version 2.6.1-SP01, update to a version that fixes this issue, if available. At...
CVE-2019-9157: Improper Limitation of a Pathname to a Restricted Directory
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...
Pornhub: SSRF and local file disclosure by video upload on http://www.youporn.com/
The researcher was successful in exploiting a vulnerability in 3rd encoding party library resulting in the execution of SSRF attacks and Local File Disclosure...
The vulnerability of the XML analyzer browser Internet Explorer, which allows a hacker to disclose protected information
The vulnerability of the XML browser analyzer Internet Explorer is related to a bug that restricts XML links to external objects. Exploiting this vulnerability can allow an attacker to gain access to local files and disclose protected information using a specially crafted MHT file MHTML Web Archi...
Internet Explorer XXE vulnerability alerts-a vulnerability alert-the black bar safety net
GMT 4 on 11 May, the Foreign Security Fellow at the John Page public disclosure Internet Explorer 11 XXE vulnerability, successful exploitation of the vulnerability will lead to local file disclosure. Microsoft learned of the vulnerability, given a”temporary non-fix”results. In view of the...