CVE-2023-35892 IBM Financial Transaction Manager for SWIFT Services XML external entity injection

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786...

CVE-2023-35892 IBM Financial Transaction Manager for SWIFT Services XML external entity injection

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786...

IBM Financial Transaction Manager for SWIFT Services Code Issue Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from International Business Machines IBM. The product is primarily used to monitor, track and report on financial payments and transactions. A code issue vulnerability exists in IBM Financial Transacti...

Security Bulletin: XML External Entity Injection vulnerability affects IBM Financial Transaction Manager for SWIFT Services (CVE-2023-35892)

Summary XML External Entity Injection vulnerability affects IBM Financial Transaction Manager for SWIFT Services. This vulnerability is addressed. Vulnerability Details CVEID:CVE-2023-35892 DESCRIPTION: IBM Financial Transaction Manager for SWIFT Services is vulnerable to an XML External Entity...

PT-2023-6905 · Ibm · Ibm Financial Transaction Manager For Swift Services

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for SWIFT Services version 3.2.4 Description: The issue is related to incorrect restriction of XML links to external objects, which can be exploited by a remote attacker to expose sensitive information or...

GHSA-G454-WJ9R-JPG4 Path traversal in Zip Swift

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

Path traversal in Zip Swift

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

Path traversal in Zip Swift

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

Path traversal

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

How “EDR Extra Strength” simplifies traditional EDR complexity

Traditional Endpoint Detection and Response EDR today has a three-fold complexity problem--with big consequences. First, complexity in EDR deployment causes long delays, directly impacting ROI and leaving organizations vulnerable to breaches. In fact, almost 10 percent of small security teams cit...

Zip Swift 路径遍历漏洞

Zip Swift is a Swift framework for compressing and decompressing files by individual developer Roy Marmelstein in Sweden. A security vulnerability exists in Zip Swift version v2.1.2, which stems from a vulnerability that allows an attacker to perform a path traversal attack via a crafted zip entr...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

PT-2023-26797 · Zip Swift · Zip Swift

Name of the Vulnerable Software and Affected Versions: Zip Swift version 2.1.2 Description: The issue allows attackers to execute a path traversal attack via a crafted zip entry. This enables attackers to potentially access or modify files outside the intended directory, posing a security risk...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

CVE-2023-39135

CVE-2023-39135 concerns Zip Swift v2.1.2, where a crafted zip entry can trigger a path traversal, enabling an attacker to access files outside the intended directory. The CVE entry notes a local attack surface with low exploit complexity and requiring user interaction, and the provided metrics li...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

Information Exposure

Overview mongodb/mongo-swift-driver is a The official MongoDB driver for Swift. Affected versions of this package are vulnerable to Information Exposure via the command listener feature. When it is enabled not the default setting, some drivers may inadvertently publish events containing sensitive...

Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...