18880 matches found
CVE-2020-36641
A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...
CVE-2020-36641
The CVE-2020-36641 entry concerns gturri aXMLRPC up to version 1.12.0, where the ResponseParser (src/main/java/de/timroes/axmlrpc/ResponseParser.java) is vulnerable to XML External Entity (XXE) reference manipulation. A fix is available in version 1.14.0, with the patch identified as 456752ebc1ef...
CVE-2020-36641 gturri aXMLRPC ResponseParser.java ResponseParser xml external entity reference
A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...
CVE-2020-36640
A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...
Xxe
A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...
CVE-2020-36640 bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference
A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...
CVE-2020-36640
In CVE-2020-36640, Bonitasoft bonita-connector-webservice (up to 1.3.0) contains a vulnerability in TransformerConfigurationException in SecureWSConnector.java that leads to an XML External Entity (XXE) reference. The issue is mitigated by upgrading to version 1.3.1; the patch is identified as a1...
CVE-2020-36640 bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference
A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...
PT-2023-11810 · Bonitasoft · Bonita-Connector-Webservice
Name of the Vulnerable Software and Affected Versions: bonitasoft bonita-connector-webservice versions up to 1.3.0 Description: A problematic issue was found in the software, affecting the TransformerConfigurationException function of the file...
PT-2023-11811 · Gturri · Xmlrpc
Name of the Vulnerable Software and Affected Versions: gturri aXMLRPC versions up to 1.12.0 Description: A vulnerability was found in the ResponseParser function of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference...
EulerOS 2.0 SP11 : libxml2 (EulerOS-SA-2023-1041)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, sever...
Bonitasoft Bonita Web 代码问题漏洞
Bonitasoft Bonita Web is an open source business process management and low-code development platform for the Bonitasoft community. A code issue vulnerability exists in Bonitasoft Bonita Web 1.3.0 and prior versions, which stems from its...
Amazon Linux 2 : libxml2 (ALAS-2021-1662)
The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1662 advisory. GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at...
CVE-2022-40711
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...
CVE-2022-40711
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...
Cross site scripting
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...
PrimeKey EJBCA 跨站脚本漏洞
PrimeKey EJBCA is a full-featured CA system software from PrimeKey Sweden. The software is used for domain certificate management, enrollment and enrollment-to-certificate validation, and other functions to achieve access security. A security vulnerability exists in PrimeKey EJBCA version 7.9.0.2...
CVE-2022-40711
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users...
PT-2023-13896 · Primekey · Primekey Ejbca
Name of the Vulnerable Software and Affected Versions: PrimeKey EJBCA version 7.9.0.2 Community Description: The issue allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users. Recommendations: For PrimeKey EJBCA...