K12487579: Apache vulnerabilities CVE-2018-1282, CVE-2018-1284, CVE-2018-1295, CVE-2018-1308, and CVE-2018-1315

Security Advisory Description CVE-2018-1282 This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation. CVE-2018-1284 In Apache Hive 0.6.0 to 2.3.2,...

K15879: SOAP parser vulnerability CVE-2013-1824

Security Advisory Description The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue in the...

CVE-2015-10082

A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It ...

Xxe

A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It ...

CVE-2015-10082

CVE-2015-10082 affects UIKit0 libplist 1.12; the XML handler’s plist_from_xml function in src/xplist.c is vulnerable to an XML External Entity Reference (XXE). The patch is identified by the hash c086cb139af7c82845f6d565e636073ff4b37440. Documented references across multiple advisories (including...

SUSE SLES12 Security Update : clamav (SUSE-SU-2023:0453-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0453-1 advisory. - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser bsc1208363. - CVE-2023-20052: Fixed ...

CVE-2023-20855

VMware vRealize Orchestrator contains an XML External Entity XXE vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalati...

GHSA-4JX2-HVQW-93J9 dd-plist XML External Entitly vulnerability

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The nam...

CVE-2016-15026

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

CVE-2016-15026

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

Xxe

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

CVE-2016-15026

CVE-2016-15026 affects 3breadt dd-plist version 1.17 with an XML External Entity (XXE) handling flaw in the XML parser. The issue can be leveraged by a local attacker to read arbitrary files on the server by supplying specially crafted XML content. A fix is available in dd-plist 1.18, with the pa...

CVE-2016-15026 3breadt dd-plist xml external entity reference

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

Cross-Site Scripting (XSS)

backstage is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to not sanitizing catalog content which allows an attacker to inject script urls in the entities stored in the catalog, which results in XSS when a user clicks on the entry...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-10345 · Dd-Plist · Dd-Plist

Name of the Vulnerable Software and Affected Versions: 3breadt dd-plist version 1.17 Description: A vulnerability was found in the software, classified as problematic, affecting some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached...

dd-plist 代码问题漏洞

dd-plist is a Java library for working with attribute lists from the individual developer Daniel Dreibrodt. A code issue vulnerability exists in dd-plist version 1.17, which stems from the presence of an xml external entity reference vulnerability...

GHSA-3VRC-RRPW-R5PW java-xmlbuilder vulnerable to XML External Entity Reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

java-xmlbuilder vulnerable to XML External Entity Reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

CVE-2014-125087

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...