CVE-2022-34832

VERMEG AgileReporter 21.3 is affected by an XML External Entity (XXE) vulnerability in the Analysis component when processing XML documents. The root cause is XXE and the impact involves potential confidentialit y/availability concerns as per the CVE description. The connected sources confirm the...

The vulnerability of the Protobuf serialization protocol’s text analysis component, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

PT-2020-20144 · Trend Micro · Ossec-Hids

Name of the Vulnerable Software and Affected Versions: OSSEC-HIDS versions 2.7 through 3.5.0 Description: The server component responsible for log analysis, ossec-analysisd, is vulnerable to a use-after-free during processing of ossec-alert formatted messages received from authenticated remote...