libxml-libxml-perl XML Processing Information Disclosure Vulnerability

libxml-libxml-perl is a library that provides an interface to parse and manipulate XML files. An error in the libxml-libxml-perl program's handling of the 'expandentities' parameter in the XML::LibXML module allows remote attackers to obtain information about sensitive data through the use of...

MGASA-2015-0199 Updated perl-XML-LibXML packages fix CVE-2015-3451

Updated perl-XML-LibXML package fixes security vulnerability: Tilmann Haak from xing.com discovered that XML::LibXML did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected...

USN-2592-1 libxml-libxml-perl vulnerability

Tilmann Haak discovered that XML::LibXML incorrectly handled the expandentities parameter in certain situations. A remote attacker could possibly use this issue to access sensitive information...

UBUNTU-CVE-2015-3451

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...

UBUNTU-CVE-2014-6272

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...

UBUNTU-CVE-2004-2771

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...

CVE-2004-2771

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...

CVE-2004-2771: Improper Input Validation

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...

PT-2014-2062

Name of the Vulnerable Software and Affected Versions Heirloom mailx versions 12.5 and earlier BSD mailx versions 8.1.2 and earlier Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an email address, specifically through the expand function in...

UBUNTU-CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

PT-2015-3093

Name of the Vulnerable Software and Affected Versions Libevent versions 1.4.x through 1.4.14 Libevent versions 2.0.x through 2.0.21 Libevent versions 2.1.x through 2.1.4-beta Description The issue is caused by multiple integer overflows in the evbuffer API, allowing context-dependent attackers to...

PT-2014-4982

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.82.1 Description The issue allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand string function. This occurs when the EXPERIMENTAL DMARC feature is enabled...

PT-2014-1413

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.32 PHP versions 5.5.x prior to 5.5.16 Description The issue is related to multiple buffer overflows in the php parserr function, which can be exploited by remote DNS servers using crafted DNS records. This can lead to...

RESTEasy: XXE via parameter entities

It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible...

PT-2020-7650

Name of the Vulnerable Software and Affected Versions musl libc versions 0.9.13 through 1.0.3 musl libc versions 1.1.x before 1.1.2 Description The issue is related to multiple stack-based buffer overflows in the dn expand function, which can be triggered by an invalid name length in a DNS...

Code injection

Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection...

CVE-2012-3280

Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection...

CVE-2012-3280

Technical details (affected products/versions, root cause, fix) are not provided in the initial or connected documents. No concrete technical information is available here; monitor for updates and future disclosures.

PT-2013-1586

Name of the Vulnerable Software and Affected Versions HP NonStop Servers versions H06.x through J06.x Description The issue allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection...

CVE-2012-3280: Undefined Security Weakness

Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection...