CVE-2022-37189

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE) due to the unsafe use of xml.etree to parse untrusted XML input, resulting in Denial of Service. This vulnerability is documented across multiple sources (NVD, Red Hat, Veracode, GHSA, OSV). Exploitation details are not provided ...

CVE-2022-37189

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity XXE, leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input...

CVE-2022-37189

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity XXE, leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input...

MAL-2022-4806 Malicious code in netlify-gocommerce-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf359de5ba0905071d75d7d2766b0c08ebe09383374772ba12baa19cecd3c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5184 Malicious code in package-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa4cb3784d3ba6aafd1300c8861741e31526e2a3653564bc354e96cef74314c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5107 Malicious code in opsgenie-connectwise-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45eb34acac118701b9fce76014bda5547b8ef8ecb7fa3c5de42591eb484616f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3411 Malicious code in google-auth-library-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cba35f5d5ad2abbe0f380ecedf252a58857f3f01eb94ccd979f4ebcb752adef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2553 Malicious code in docusaurus-plugin-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 232063f9bf78828e30e0c8bb7374c02a90b0a6bf29118093c955b5412deadddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5921 Malicious code in sample-travis-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 568970137987e9314235b38ecb7007db2b4db3023f6eaf1cacb92983e90f3613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4330 Malicious code in lldb-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9916629b31632e8891a1ad6e398d0a3159ec2c1ba97501fbe7f68b29e77f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3071 Malicious code in fleetrouting-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d5c873464b5c0cc41b6279988ed72f9fcd28982a31ad71211c6ce8c93fdf0a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2031 Malicious code in com.assistant.sdk.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2f437d5aaa9890905e98b3545810bd6b039017c40cd9cb399bb460abe18b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-23863

Name of the Vulnerable Software and Affected Versions DDMAL MEI2Volpiano version 0.8.2 Description The issue is related to an XML External Entity XXE vulnerability, which can lead to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input...

Permissions by Term - Moderately critical - Access bypass - SA-CONTRIB-2022-055

This module enables you to restrict content via taxonomy terms and related permissions. The module doesn't sufficiently restrict cached content in certain circumstances. This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module...

AVEVA Edge 2020 R2 SP1 and all prior versions

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: AVEVA Edge 2020 R2 SP1 and all prior versions Vulnerabilities: Insufficient UI Warning of Dangerous Operations, Uncontrolled Search Path Element, Deserialization of Untrusted Data, Improper Restriction of...

IBM Cognos Analytics has an unspecified vulnerability (CNVD-2022-62227)

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation of the United States. IBM Cognos Analytics versions 11.1.7, 11.2.0 and 11.2.1 contain a security vulnerability that stems from vulnerability to XML External Entity Injection XXE attacks when working with XML...

CVE-2022-36773

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233571...

CVE-2022-36773

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233571...

CVE-2022-36773

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233571...

PT-2022-23616 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.1.7 through 11.2.1 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...