7692 matches found
Remote code execution
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
Xxe
MicroMathematics version before commit 5c05ac8 contains a XML External Entity XXE vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted SMathStudio files. This...
CVE-2018-1000832
ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
Xxe
XR3Player version = V3.124 contains a XML External Entity XXE vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...
Xxe
FreeCol version = nightly-2018-08-22 contains a XML External Entity XXE vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file...
UBUNTU-CVE-2018-1000825
FreeCol version = nightly-2018-08-22 contains a XML External Entity XXE vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file...
CVE-2018-1000823
Affected software: exist-db (XML Parser for REST Server)
CVE-2018-1000833
ZoneMinder is affected by an object-injection vulnerability tracked as CVE-2018-1000833, affecting ZoneMinder versions <= 1.32.2 (also reported by OpenVAS as ZoneMinder
CVE-2018-1000822
codelibs fess version before commit faa265b contains a XML External Entity XXE vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via specially crafted GSA XML files. This...
CVE-2018-1000838
Summary: CVE-2018-1000838 affects Autopsy versions
CVE-2018-1000831
K9Mail version = v5.600 contains a XML External Entity XXE vulnerability in WebDAV response parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious WebDAV server or intercept the reponse of a valid WebDA...
CVE-2018-1000820
Affected software: neo4j-contrib neo4j-apoc-procedures. Vulnerability: XML External Entity (XXE) in the XML Parser. Root cause / affected versions: before commit 45bc09c. Impact (as stated): disclosure of confidential data, denial of service, SSRF, port scanning. Status / fix: appears fixed after...
CVE-2018-1000828
FrostWire version = frostwire-desktop-6.7.4-build-272 contains a XML External Entity XXE vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to...
CVE-2018-1000837
CVE-2018-1000837 affects UML Designer
CVE-2018-1000823
exist version = 5.0.0-RC4 contains a XML External Entity XXE vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...
CVE-2018-1000824
MegaMek version v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000829
The CVE affects Anyplace released code prior to commit 80359b4, containing a XML External Entity (XXE) vulnerability in the Man-in-the-middle on map API call. This can lead to disclosure of confidential data, denial of service, SSRF, and port scanning. The issue appears fixed in the code after co...
CVE-2018-1000824
CVE-2018-1000824 affects MegaMek for versions