Lucene search
+L

496 matches found

NVD
NVD
•added 2019/08/20 7:15 p.m.•42 views

CVE-2019-4419

IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737...

8.2CVSS7.3AI score0.02427EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/20 7:15 p.m.•27 views

Xxe

IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737...

6.4CVSS7.9AI score0.02427EPSS
SaveExploits0References2Affected Software3
Prion
Prion
•added 2019/08/20 7:15 p.m.•30 views

Xxe

IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

6.4CVSS8AI score0.03851EPSS
SaveExploits0References3Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/08/16 6:10 p.m.•22 views

Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a XML External Entity vulnerability

Summary IBM Security Guardium is aware of the following vulnerability Vulnerability Details CVEID: CVE-2019-4340 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit...

8.2CVSS1.5AI score0.02427EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2019/08/08 6:15 p.m.•31 views

CVE-2019-14693

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

8.5CVSS8.5AI score0.04246EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/08 6:15 p.m.•27 views

Xxe

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS8.1AI score0.04246EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/08 5:29 p.m.•37 views

CVE-2019-14693

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection XXE attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

8.5CVSS8.4AI score0.04246EPSS
SaveExploits0References1
Prion
Prion
•added 2019/07/30 2:15 p.m.•21 views

Xxe

IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007...

5.5CVSS6.8AI score0.01554EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/07/30 1:25 p.m.•37 views

CVE-2019-4062

IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007...

7.1CVSS6.8AI score0.01554EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/07/30 12:00 a.m.•24 views

IBM Daeja ViewONE Virtual Code Issue Vulnerability

IBM Daeja ViewONE Virtual is an HTML5-based document and image viewer from IBM USA. The product is primarily used to view, annotate and print images and documents. A code issue vulnerability exists in IBM Daeja ViewONE Virtual. An attacker could exploit the vulnerability to disclose sensitive...

7.1CVSS6.6AI score0.01888EPSS
SaveExploits0References1
Prion
Prion
•added 2019/06/17 3:15 p.m.•31 views

Xxe

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150905...

5.5CVSS6.8AI score0.01924EPSS
SaveExploits0References2Affected Software5
Prion
Prion
•added 2019/05/07 7:29 p.m.•29 views

Xxe

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129...

5.5CVSS6.8AI score0.01853EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/05/07 6:35 p.m.•31 views

CVE-2019-4208

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129...

7.1CVSS6.9AI score0.01853EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/05/02 6:11 a.m.•35 views

XML External Entity (XXE) Attacks

IBM SDK, Java Technology Edition is vulnerable to XML External Entity Injection XXE. This error occurs when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources...

8.2CVSS8.8AI score0.03632EPSS
SaveExploits0References8Affected Software3
Prion
Prion
•added 2019/04/02 2:29 p.m.•27 views

Xxe

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...

5.5CVSS6.8AI score0.02425EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2019/04/02 1:20 p.m.•69 views

CVE-2019-4043

IBM Sterling B2B Integrator (Standard Edition) vulnerable to XML External Entity (XXE) injection under CVE-2019-4043. Affected: versions 5.2.0 snf 6.0.0.0 and 6.0.0.0. Impact per IBM: potential disclosure of sensitive data or memory resource consumption. Remediation from IBM bulletin: upgrade to ...

7.1CVSS6.8AI score0.02425EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2019/02/15 8:29 p.m.•28 views

CVE-2018-1727

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630...

9.1CVSS7.4AI score0.02463EPSS
SaveExploits0References2
Prion
Prion
•added 2019/02/04 9:29 p.m.•23 views

Xxe

IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 153751...

5.5CVSS6.7AI score0.01853EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/01/30 12:00 a.m.•36 views

F5 Networks BIG-IP : TMM vulnerability (K55101404)

Under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic. CVE-2019-6590 Impact BIG-IP This vulnerability may result as a denial-of-service DOS attack on the affected BIG-IP systemwhen the systemconsumes excessive memory resources. This...

7.1CVSS5.9AI score0.01473EPSS
SaveExploits0References2
Prion
Prion
•added 2019/01/24 4:29 p.m.•30 views

Race condition

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...

5CVSS8.4AI score0.01249EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder