CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

876 matches found

Prion•added 2018/03/09 7:29 p.m.•23 views

Xxe

XML external entity XXE vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM fo...

4CVSS5.8AI score0.00815EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/03/09 7:00 p.m.•31 views

CVE-2016-0268

4AI score0.00815EPSS

SaveExploits0References1

CVE•added 2018/03/09 7:00 p.m.•78 views

CVE-2016-0268

CVE-2016-0268 affects IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services on Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013. The vulnerability is an XML External Entity (XXE) issue in XML processing that could allow a remote authenticated atta...

4.3CVSS5.1AI score0.00815EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/03/09 12:00 a.m.•7 views

CVE-2016-0268: Improper Restriction of XML External Entity Reference

4.3CVSS6.1AI score0.00815EPSS

SaveExploits0References2

Prion•added 2018/02/27 3:29 p.m.•21 views

Design/Logic Flaw

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

6.4CVSS6.5AI score0.02107EPSS

SaveExploits2References6Affected Software3

UbuntuCve•added 2018/02/27 3:29 p.m.•31 views

CVE-2018-0489

6.5CVSS6.7AI score0.02107EPSS

SaveExploits0References3

Cvelist•added 2018/02/27 3:00 p.m.•54 views

CVE-2018-0489

6.6AI score0.02107EPSS

SaveExploits0References6

CVE•added 2018/02/27 3:00 p.m.•133 views

CVE-2018-0489

CVE-2018-0489 concerns the xmltooling library (XMLTooling-C) used by Shibboleth Service Provider and related products. The vulnerability arises in versions of xmltooling before 1.6.4 where digital signatures of user data are mishandled, enabling remote attackers to obtain sensitive information or...

6.5CVSS6.5AI score0.02107EPSS

SaveExploits0References6Affected Software1

Debian CVE•added 2018/02/27 3:00 p.m.•71 views

CVE-2018-0489

6.5CVSS5.5AI score0.02107EPSS

SaveExploits0

NVD•added 2018/02/21 4:29 p.m.•27 views

CVE-2016-0369

XML external entity XXE vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088...

4CVSS3AI score0.00985EPSS

SaveExploits0References2

Prion•added 2018/02/21 4:29 p.m.•23 views

Xxe

4CVSS5.8AI score0.00985EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2018/02/21 4:00 p.m.•36 views

CVE-2016-0369

3AI score0.00985EPSS

SaveExploits0References2

CVE•added 2018/02/21 4:00 p.m.•57 views

CVE-2016-0369

IBM Forms Experience Builder versions 8.5, 8.5.1 and 8.6 are affected by an XML External Entity (XXE) processing vulnerability. The root cause is XXE when processing XML data, which could allow a remote authenticated attacker to obtain sensitive information. The CVSS v3 base score is 2.7 (LOW). R...

4CVSS3.1AI score0.00985EPSS

SaveExploits0References2Affected Software1

OSV•added 2018/02/15 4:29 p.m.•20 views

CVE-2017-17289

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. The software does not release allocated memory properly...

3.3CVSS5.8AI score0.00207EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•24 views

Memory corruption

2.1CVSS4AI score0.00207EPSS

SaveExploits0References1Affected Software6

CVE•added 2018/02/15 4:00 p.m.•84 views

CVE-2017-17289

CVE-2017-17289 describes a memory-leak vulnerability in Huawei devices (e.g., DP300, RP200, TE/VM series) when processing XML data. The issue arises from failure to properly free allocated memory, enabling an authenticated, local attacker to repeatedly upload crafted XML files, potentially causin...

3.3CVSS4AI score0.00207EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:00 p.m.•36 views

CVE-2017-17289

3.8AI score0.00207EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•4 views

CVE-2017-17289: Missing Release of Resource after Effective Lifetime

3.3CVSS5.2AI score0.00207EPSS

SaveExploits0References2

RubySec•added 2018/01/29 12:00 a.m.•48 views

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

The version of libxml2 packaged with Nokogiri contains a vulnerability. Nokogiri has mitigated these issue by upgrading to libxml 2.9.5. Wei Lei discovered that libxml2 incorrecty handled certain parameter entities. An attacker could use this issue with specially constructed XML data to cause...

7.5CVSS3.3AI score0.05928EPSS

SaveExploits0References1Affected Software1

RubySec•added 2018/01/29 12:00 a.m.•42 views

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

The version of libxml2 packaged with Nokogiri contains a vulnerability. Nokogiri has mitigated these issue by upgrading to libxml 2.9.6. It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consum...

8.8CVSS3.8AI score0.02938EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by