gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;getPolygon;ILI2Reader::getGeometry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6328230174785536 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000080e4d60 Crash State:...

gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;ILI2Reader::setFieldDefn;ILI2Reader::setFieldDefn

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5314575312355328 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000836a798 Crash State:...

IBM WebSphere Cast Iron Solution XML External Entity Injection Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. An XML external entity injection vulnerability exists in IBM WebSphere Cast Iron Solution. A remote attack...

IBM WebSphere Cast Iron Solution Security Bypass Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. A security vulnerability exists in IBM WebSphere Cast Iron Solution that stems from the program failing to...

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

CVE-2016-9691

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

Xxe

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

Input validation

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

CVE-2016-9691

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

CVE-2016-9691

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

CVE-2016-9691

CVE-2016-9691—IBM WebSphere Cast Iron Solution : Affected products are WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0. The flaw is an XML External Entity (XXE) vulnerability in XML data processing, enabling a remote attacker to cause a denial of service and potentially expose sensitive informatio...

CVE-2016-9692

The CVE affects IBM WebSphere Cast Iron Solution versions 7.0.0 and 7.5.0.0, where improper validation of user-supplied input enables External Service Interaction. An attacker can induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names, potentially cau...

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

PT-2017-10268

Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron Solution versions 7.0.0 through 7.5.0.0 Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information ...

CVE-2016-9692: Improper Input Validation

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

CVE-2016-9691: Improper Restriction of XML External Entity Reference

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

PT-2017-10269

Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron Solution versions 7.0.0 through 7.5.0.0 Description The issue is caused by improper validation of user-supplied input, allowing a remote attacker to exploit it and induce the application to perform server-side DNS looku...

castironradiatorcentre.co.uk XSS vulnerability

Vulnerable URL: https://www.castironradiatorcentre.co.uk/products.asp?search=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27%3C/Script%20/K/%3E=Accessories+%26+Spares=Wall+Stays=buy=CDC-LUXSTAY-BLKNI=1 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for...

CVE-2017-5042

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...