35 matches found
CVE-2024-55887 Ucum-java has an XXE vulnerability in XML parsing
Ucum-java is a FHIR Java library providing UCUM Services. In versions prior to 1.0.9, XML parsing performed by the UcumEssenceService is vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts...
Ucum-java 代码问题漏洞
Ucum-java is a FHIR open source FHIR Java library that provides Ucum services. A code issue vulnerability exists in Ucum-java versions prior to 1.0.9 that stems from the XML parsing performed by the UcumEssenceService being vulnerable to XML external entity injection, resulting in external client...
PT-2024-9589 · Ucum-Java · Ucum-Java
Name of the Vulnerable Software and Affected Versions: Ucum-java versions prior to 1.0.9 Description: The issue is related to XML external entity injections in the UcumEssenceService. This occurs when XML parsing is performed, allowing a malicious DTD tag in a processed XML file to produce XML...
essenceofitaly.it Improper Access Control vulnerability OBB-3840324
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-409 Malicious code in @macp/essence-air (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ce2bb692b449afd6fbae34af05f452a31bdb972c86ee8c54cd33fef1afe524 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @macp/essence-air (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ce2bb692b449afd6fbae34af05f452a31bdb972c86ee8c54cd33fef1afe524 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
essence-journeys.com Cross Site Scripting vulnerability OBB-2378000
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
100halatov.ru Cross Site Scripting vulnerability OBB-2359932
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SQL Injection Vulnerability in the Backend of Essence CMS (CNVD-2019-14594)
JX CMS Jxcms is a website construction and management system independently developed by Taizhou JX Information Technology Co. A SQL injection vulnerability exists in the background of Jxcms. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Essence Integer Overflow Vulnerability
Essence is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of Essence's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...
CVE-2018-13702
The mintToken function of a smart contract implementation for Essence, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13702
The CVE-2018-13702 issue affects Essence, a tradable Ethereum ERC20 token. The mintToken function in Essence’ s smart contract has an integer overflow that allows the contract owner to overwrite any user’s balance with an arbitrary value. This is described across multiple sources (CNVD-2018-12855...
GStreamer Multiple Function Denial of Service Vulnerability
GStreamer is an open source multimedia framework. GStreamer has a security vulnerability in the gstminiobjectunref/gsttaglistunref/gstmxfdemuxupdateessencetracks function. A remote attacker caused a denial of service...
