FreeBSD : py39-OWSLib -- arbitrary file read vulnerability (e5d117b3-2153-4129-81ed-42b0221afa78)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e5d117b3-2153-4129-81ed-42b0221afa78 advisory. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service...

CVE-2023-26264

All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity XXE attacks in the license parsing code...

CVE-2023-26264

All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity XXE attacks in the license parsing code...

MAL-2023-432 Malicious code in fca-zach-remade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647625dc78eb955e2d970aa60159a08d9e50e1e80f1be250861c8428d918935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Talend Data Catalog 代码问题漏洞

Talend Data Catalog is a tool that combines data cataloging and metadata management from Talend. It is used to connect data from platforms, databases, and analytic tools to generate a holistic view of the information supply chain in a language everyone can understand. A security vulnerability...

RHEL 8 : pki-core:10.6 (RHSA-2023:1747)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1747 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: access to...

CVE-2023-26264

All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity XXE attacks in the license parsing code...

CVE-2023-26263

All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity XXE attacks in the /MIMBWebServices/license endpoint of the remote harvesting server...

Talend Data Catalog 代码问题漏洞

Talend Data Catalog is a tool that combines data cataloging and metadata management from Talend. It is used to connect data from platforms, databases, and analytic tools to generate a holistic view of the information supply chain in a language everyone can understand. A security vulnerability...

CVE-2023-26264

All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity XXE attacks in the license parsing code...

CVE-2023-26263

Talend Data Catalog (Talend) is affected by an XML External Entity (XXE) vulnerability tracked as CVE-2023-26263. The issue exists in the license endpoint of the remote harvesting server (at /MIMBWebServices/license) and affects all versions prior to 8.0-20230110. The CVSS base metrics indicate a...

Malicious code in ynodejs_mod_log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861d73fdebc783ac105077a9c4483c1c7e4528821dcd7c8e7b8a1e27bbed1f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1000 Malicious code in ynodejs_mod_log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861d73fdebc783ac105077a9c4483c1c7e4528821dcd7c8e7b8a1e27bbed1f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-174 Malicious code in checkout-demo-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b6c81ff2e93760eb7bdf531dd3932fcfeb0de068e99ab2d1910004c1b0ed884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-201 Malicious code in com.example.show-toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4961545d6c31acce87aae4be45c313c9bc7a0ce3e72eda23cced115c94c489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-919 Malicious code in uploadcare-jotform-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2d37a0408ad8c603efcb131e322f0f2d2a142058620fa1b41f396e212590b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deskpro-notifications-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e07cbfe7dbcfbce0bd86d7353862570a270265a771f2ed1da61bb8ddf101b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in the improper limitation of XML references to external objects, which allows attackers to perform XXE attacks.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

CVE-2023-28828

A vulnerability has been identified in Polarion ALM All versions V22R2. The application contains a XML External Entity Injection XXE vulnerability. This could allow an attacker to view files on the application server filesystem...

CVE-2023-28828

A vulnerability has been identified in Polarion ALM All versions V22R2. The application contains a XML External Entity Injection XXE vulnerability. This could allow an attacker to view files on the application server filesystem...