CVE-2016-15026

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

Xxe

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

CVE-2016-15026

CVE-2016-15026 affects 3breadt dd-plist version 1.17 with an XML External Entity (XXE) handling flaw in the XML parser. The issue can be leveraged by a local attacker to read arbitrary files on the server by supplying specially crafted XML content. A fix is available in dd-plist 1.18, with the pa...

CVE-2016-15026 3breadt dd-plist xml external entity reference

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The pat...

dd-plist 代码问题漏洞

dd-plist is a Java library for working with attribute lists from the individual developer Daniel Dreibrodt. A code issue vulnerability exists in dd-plist version 1.17, which stems from the presence of an xml external entity reference vulnerability...

PT-2023-10345 · Dd-Plist · Dd-Plist

Name of the Vulnerable Software and Affected Versions: 3breadt dd-plist version 1.17 Description: A vulnerability was found in the software, classified as problematic, affecting some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached...

GHSA-3VRC-RRPW-R5PW java-xmlbuilder vulnerable to XML External Entity Reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

java-xmlbuilder vulnerable to XML External Entity Reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

CVE-2014-125087

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

Xxe

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

UBUNTU-CVE-2014-125087

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

CVE-2014-125087

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

CVE-2014-125087

CVE-2014-125087 affects java-xmlbuilder up to 1.1. The issue is an XML External Entity (XXE) reference in the XML parser handling, allowing potentially disclosure of sensitive files. A fix is available in version 1.2, with patch name e6fddca201790abab4f2c274341c0bb8835c3e73. Upgrading the affecte...

CVE-2014-125087 java-xmlbuilder xml external entity reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

@actvalue/av-aws-sdk (>=0.5.0, <=0.9.2), @adiza/sfpowerscripts (>=23.0.0, <=25.0.7) +618 more potentially affected by CVE-2023-26920 via fast-xml-parser (>=4.0.0, <=4.1.1)

fast-xml-parser NPM version =4.0.0, =0.5.0, =23.0.0, =35.0.0, =1.6.3, =7.1.3, =2.0.17, =1.2.11, =1.11.83, =8.3.11, =3.10.0, =3.0.0, =0.0.1-beta.1, =0.0.1-beta.1, =2.0.0, =10.8.0-RC.0, =10.12.0-RC.1 and more Source cves: CVE-2023-26920 Source advisory: SNYK:JS-FASTXMLPARSER-3325616...

PT-2023-10155 · Unknown · Java-Xmlbuilder

Name of the Vulnerable Software and Affected Versions: java-xmlbuilder versions up to 1.1 Description: A vulnerability was found in the software, rated as problematic. It affects some unknown functionality and leads to xml external entity reference. Recommendations: For versions up to 1.1, upgrad...

java-xmlbuilder 代码问题漏洞

java-xmlbuilder is James Murty personal developer of a utility program . It allows the construction of simple XML documents using relatively sparse Java code. A code issue exists in versions of java-xmlbuilder prior to 1.1, which stems from the presence of an unknown feature that causes xml...

VMSA-2023-0005:VMware vRealize Orchestrator update addresses an XML External Entity (XXE) vulnerability

Advisory ID: VMSA-2023-0005 CVSSv3 Range: 8.8 Issue Date:2023-02-21 Updated On: 2023-02-21 Initial Advisory CVEs: CVE-2023-20855 Synopsis: VMware vRealize Orchestrator update addresses an XML External Entity XXE vulnerability CVE-2023-20855 RSS Feed Download PDF Download Text File Share this page...

XML External Entity (XXE)

org.neo4j.procedure:apoc-core is vulnerable to XML External Entity XXE attacks. A remote authenticated attacker is able to trigger an XML external entity injection via the parseXML function which allows external entities to be resolved due to an improper configuration of the apoc.import.graphml...

SUSE CVE-2023-20052

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on a...