585 matches found
CVE-2018-0765: Improper Restriction of XML External Entity Reference
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework...
CVE-2017-6323: Improper Restriction of XML External Entity Reference
The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...
CVE-2018-2401: Improper Restriction of XML External Entity Reference
SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...
CVE-2018-6489: Improper Restriction of XML External Entity Reference
XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...
CVE-2017-5828: Improper Restriction of XML External Entity Reference
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2018-2392: Improper Restriction of XML External Entity Reference
Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...
CVE-2018-1307: Improper Restriction of XML External Entity Reference
In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD type of attacks. Mitigation is to use...
CVE-2018-1000012: Improper Restriction of XML External Entity Reference
Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...
CVE-2018-1000009: Improper Restriction of XML External Entity Reference
Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...
CVE-2017-15639: Improper Restriction of XML External Entity Reference
tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...
CVE-2014-0030: Improper Restriction of XML External Entity Reference
The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity XXE attacks via unspecified vectors...
CVE-2017-12620: Improper Restriction of XML External Entity Reference
When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache...
CVE-2015-7241: Improper Restriction of XML External Entity Reference
XML External Entity XXE vulnerability in SAP Netweaver before 7.01...
Siemens OPC UA Protocol Stack Discovery Service (Update E)
CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Industrial products using the Discovery Service of the OPC UA protocol stack by the OPC foundation Vulnerability: Improper Restriction of XML External Entity Reference AFFECTED PRODUCTS Siemens...
CVE-2017-7664: Improper Restriction of XML External Entity Reference
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0...
CVE-2017-8557: Improper Restriction of XML External Entity Reference
Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a...
SUSE SLES11 Security Update : libxml2 (SUSE-SU-2017:1813-1)
This update for libxml2 fixes the following issues: Security issues fixed : - CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 - CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 - CVE-2017-7375: Prevented an unwanted external entity reference...
SUSE-SU-2017:1813-1 Security update for libxml2
This update for libxml2 fixes the following issues: Security issues fixed: CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 CVE-2017-7375: Prevented an unwanted external entity reference bsc1044894...
openSUSE Security Update : libxml2 (openSUSE-2017-793)
This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2017-7376: Increase buffer space for port in HTTP redirect support bsc1044887 - CVE-2017-7375: Prevent unwanted external entity reference bsc1044894 This update was imported from the SUSE:SLE-12-SP2:Update update...