19570 matches found
MAL-2023-586 Malicious code in mdes_digital_enablement_api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef91fec71d700626e729317e9beb9132a1be4c4c60fce5f67f94ceae1a198435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-410 Malicious code in fca-jiserdz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37c7c1daa39954ff43ad664a7222262a14f5fcf5e1ad3cb95db96957c750ccb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-592 Malicious code in micro-username (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16568c3c83ac6dd335ed741695670ec423436e9f9c4070c7f200d46edc98948b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: IBM MQ Appliance is vulnerable to an XML External Entity Injection attack (CVE-2022-31775)
Summary IBM MQ Appliance has resolved an XML External Entity Injection vulnerability. Vulnerability Details CVEID:CVE-2022-31775 DESCRIPTION: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External...
GHSA-HXJP-Q6C3-38FX XML External Entity Reference in Apache NiFi
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
CVE-2023-22832
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
Xxe
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
CVE-2023-22832
CVE-2023-22832 affects Apache NiFi: ExtractCCDAAttributes Processor (versions 1.2.0–1.19.1). The issue is improper handling of XML External Entity (XXE) references via XML Document Type Declarations, enabling attacks from malicious XML documents. The documented impact is high confidentiality risk...
CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
Apache NiFi 代码问题漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. An XML external entity injection vulnerability exists in Apache NiFi versions 1.2.0 through 1.19.1, which stems fro...
CVE-2023-22832: Improper Restriction of XML External Entity Reference
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-1393)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-24323
Mojoportal v2.7 was discovered to contain an authenticated XML external entity XXE injection vulnerability...
Security Bulletin: IBM Sterling B2B Integrator is vulnerable to XML Enternal Entity error due to Apache POI (CVE-2019-12415)
Summary IBM Sterling B2B Integrator has addressed the XXE security vulnerability in Apache POI Vulnerability Details CVEID:CVE-2019-12415 DESCRIPTION: Apache POI could allow a remote attacker to obtain sensitive information, caused by an XML external entity XXE error when processing XML data by...
MAL-2023-60 Malicious code in @superbet-group/web.lib.config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7765218f3f4080e651b7dd69ac87f7357d61702bd1dcc5be11c3597ef69d44cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-63 Malicious code in @superbet-group/web.lib.rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52048cd4263ed15792f49581fd01b450f4796af1f65b4e839951715b237d3fcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-66 Malicious code in @superbet-group/web.types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a0aaf7c7b5a8aedf6bc88f0778aee51462546adb577e4116a18d36d41462d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...