UBUNTU-CVE-2018-1000825

FreeCol version = nightly-2018-08-22 contains a XML External Entity XXE vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file...

CVE-2018-1000835

CVE-2018-1000835 affects KeePassDX up to version 2.5.0.0beta17, due to an XML External Entity (XXE) vulnerability in the kdbx file parser. Impact described in sources includes disclosure of confidential data, denial of service, SSRF, and port scanning. The connected documents do not provide expli...

CVE-2018-1000825

CVE-2018-1000825 affects FreeCol: version

CVE-2018-1000821

MicroMathematics version before commit 5c05ac8 contains a XML External Entity XXE vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted SMathStudio files. This...

CVE-2018-1000830

XR3Player, versions

CVE-2018-1000837

CVE-2018-1000837 affects UML Designer

CVE-2018-1000825

FreeCol version = nightly-2018-08-22 contains a XML External Entity XXE vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file...

CVE-2018-1000830

XR3Player version = V3.124 contains a XML External Entity XXE vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

CVE-2018-1000823

exist version = 5.0.0-RC4 contains a XML External Entity XXE vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

CVE-2018-1000828

FrostWire version = frostwire-desktop-6.7.4-build-272 contains a XML External Entity XXE vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to...

CVE-2018-1000838

Summary: CVE-2018-1000838 affects Autopsy versions

CVE-2018-1000831

K9Mail version = v5.600 contains a XML External Entity XXE vulnerability in WebDAV response parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious WebDAV server or intercept the reponse of a valid WebDA...

CVE-2018-1000834

runelite version = runelite-parent-1.4.23 contains a XML External Entity XXE vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

CVE-2018-1000820

neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity XXE vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have been fixed in after commit 45bc09c...

CVE-2018-1000838

autopsy version = 4.9.0 contains a XML External Entity XXE vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata...

CVE-2018-1000835

KeePassDX version = 2.5.0.0beta17 contains a XML External Entity XXE vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

CVE-2018-1000820

Affected software: neo4j-contrib neo4j-apoc-procedures. Vulnerability: XML External Entity (XXE) in the XML Parser. Root cause / affected versions: before commit 45bc09c. Impact (as stated): disclosure of confidential data, denial of service, SSRF, port scanning. Status / fix: appears fixed after...

CVE-2018-1000822

codelibs fess version before commit faa265b contains a XML External Entity XXE vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via specially crafted GSA XML files. This...

CVE-2018-1000828

CVE-2018-1000828 affects FrostWire desktop, version

CVE-2018-1000822

CVE-2018-1000822 : The vulnerability affects codelibs fess version before the commit faa265b, where the GSA XML file parser is vulnerable to XML External Entity (XXE). This can lead to disclosure of confidential data, denial of service, SSRF, and port scanning when processing specially crafted GS...