CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-37497 An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks XXE against the backend service...

CVE-2023-30951 CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

Design/Logic Flaw

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364

CVE-2023-37364 affects WS-Inc J WBEM Server, versions before 4.7.5. The CIM-XML protocol adapter fails to disable entity resolution, enabling context-dependent attackers to read arbitrary files or trigger a denial of service. This aligns with the issue described in the initial CVE entry and is co...

HCL Unica Platform Code Issue Vulnerability

HCL Technologies HCL Unica Platform is a state-of-the-art enterprise automated marketing platform from HCL Technologies, USA. No manual effort is required to handle routine marketing tasks and capture the most effective leads. A security vulnerability exists in HCL Unica Platform versions 12.x...

PT-2023-23081 · Foundry · The Foundry Magritte Plugin Rest-Source

Name of the Vulnerable Software and Affected Versions: The Foundry Magritte plugin rest-source affected versions not specified Description: The issue is related to an XML external Entity attack XXE in the rest-source plugin. This type of attack allows an attacker to access local or remote content...

WS J WBEM Server Code Issue Vulnerability

WS J WBEM Server is an open source server software from WS. A security vulnerability in WS-Inc J WBEM Server version 4.x prior to 4.7.5 stems from a CIM-XML protocol adapter that does not disable entity parsing, allowing context-sensitive attackers to read arbitrary files or cause a denial of...

Palantir Foundry Code Issue Vulnerability

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in the Palantir Foundry magritte rest-source plugin that stems from the presence of an XML External Entity Injection XXE vulnerability...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

CVE-2023-37364

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152...

RaspAP Command Injection vulnerability

A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via the entity POST parameters in /ajax/networking/getwgkey.php...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM WebSphere Application Server traditional is vulnerable to an XML External Entity (XXE) Injection vulnerability - CVE-2023-27554

Summary IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Following IBM® Engineering Lifecycle Engineering product ...

MAL-2023-1041 Malicious code in vue-router-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d2eb48e80ee684a1f36a9d44f562d8f86ed9df08286f57fdee187de71bf7010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1035 Malicious code in flot-axis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75e800a2dadaa8f5d0ac8a5db1564e97a702c66176c2da0c537191d88cf8fc81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-hrz-reup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0ffd60e2bdab5d1a78415bd3e9e825324abd5389b013ffabaaac77f4789ad54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1039 Malicious code in storyblok-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e2fc216a94eece7f4dff23344c885f24361cb497ae18d6c7dde8ba3c4d39a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...