Akana API Platform 代码问题漏洞

Akana API Platform is one of Akana's easiest ways to accelerate digital transformation in your organization. A code issue vulnerability exists in Akana API Platform versions prior to 2024.1.0 that stems from the presence of XML External Entity XXE injection...

CosmicSting: Magento Arbitrary File Read (CVE-2024-34102) + PHP Buffer Overflow in the iconv() function of glibc (CVE-2024-2961)

This combination of an Arbitrary File Read CVE-2024-34102 and a Buffer Overflow in glibc CVE-2024-2961 allows for unauthenticated Remote Code Execution on the following versions of Magento and Adobe Commerce and earlier if the PHP and glibc versions are also vulnerable: - 2.4.7 and earlier -...

XML External Entity (XXE) Injection

Apache Drill is vulnerable to XML External Entity XXE Injection. The vulnerability is due to inadequate restriction of external entity references, allowing attackers to access files or execute commands through manipulated XML data...

VulnCheck KEV: CVE-2019-15637

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...

GHSA-V62G-JWJ9-RFVX XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue...

Apache Drill 代码问题漏洞

Apache Drill is an open source software framework from the American company Apache Apache. Apache Drill 1.19.0 and earlier versions suffer from an XML external entity injection vulnerability that can be exploited by an attacker to read any file on a remote file system or execute commands through ...

CVE-2024-40075

Laravel v11.x was discovered to contain an XML External Entity XXE vulnerability...

PT-2024-28770 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions 11.x Description: The issue is related to an XML External Entity XXE vulnerability. This means that the software may be susceptible to attacks that manipulate XML entities to access unauthorized data or execute system-level...

CVE-2024-40075

Laravel v11.x was discovered to contain an XML External Entity XXE vulnerability...

CVE-2024-40075

CVE-2024-40075 – Laravel v11.x XXE vulnerability The connected sources indicate that Laravel version 11.x is affected by an XML External Entity (XXE) vulnerability. The available details identify the flaw as an XXE issue but do not provide concrete information about the root cause in the code, af...

IBM Engineering Requirements Management DOORS Web Access XML External Entity Injection Vulnerability

IBM Engineering Requirements Management DOORS Web Access is an engineering requirements management software from International Business Machines IBM. An XML external entity injection vulnerability exists in IBM Engineering Requirements Management DOORS Web Access version 9.7.2.8, which can be...

CVE-2024-40075

Laravel v11.x was discovered to contain an XML External Entity XXE vulnerability...

Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity...

PT-2024-38000

Name of the Vulnerable Software and Affected Versions Guardrails AI affected versions not specified Description The issue concerns RAIL documents, an XML-based format used by Guardrails AI for enforcing formatting checks on LLM outputs. Users who consume RAIL documents from external sources are a...

LG Simple Editor XML External Entity Handling Vulnerability (CNVD-2024-33683)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an XML External Entity Handling vulnerability due to an improper restriction on XML External Entity XXE references, where a...

LG Simple Editor XML External Entity Handling Vulnerability (CNVD-2024-33682)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an XML External Entity Handling vulnerability due to an improper restriction on XML External Entity XXE references, where a...

LG Simple Editor XML File External Entity Handling Vulnerability

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an XML File External Entity Handling vulnerability due to an improper restriction on XML External Entity XXE references, wher...

CVE-2024-5625

Improper Restriction of XML External Entity Reference vulnerability in PruvaSoft Informatics Apinizer Management Console allows Data Serialization External Entities Blowup. This issue affects Apinizer Management Console: before 2024.05.1...

CVE-2024-5625 XML External Entity Injection in PruvaSoft Informatics' Apinizer Management Console

Improper Restriction of XML External Entity Reference vulnerability in PruvaSoft Informatics Apinizer Management Console allows Data Serialization External Entities Blowup. This issue affects Apinizer Management Console: before 2024.05.1...

CVE-2023-50304

IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335...