McAfee DLP Endpoint 代码问题漏洞

McAfee DLP Endpoint is a Data Loss Prevention DLP endpoint from McAfee, Inc. Protects against theft and accidental disclosure of confidential data. A code issue vulnerability exists in McAfee DLP Endpoint versions 11.9.100 and 11.6.600, which stems from an improper restriction of the XML External...

PT-2022-15920 · Unknown · Dlp Endpoint For Windows

Name of the Vulnerable Software and Affected Versions: DLP Endpoint for Windows versions prior to 11.9.100 DLP Endpoint for Windows version 11.6.600 Description: The issue is related to an Improper Restriction of XML External Entity Reference, allowing a remote attacker to cause the DLP Agent to...

DEBIAN-CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

UBUNTU-CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

IBM MQ XXE (6613021)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 6613021 advisory. - IBM MQ Explorer is vulnerable to an XML External Entity Injection XXE attack due to improper XML validation in the import Wizard. CVE-2022-22489 Note that Nessus has not...

CVE-2022-22489

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

CVE-2022-22489

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

Xxe

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

CVE-2022-22489

CVE-2022-22489 affects IBM MQ and IBM MQ Explorer components (versions 8.0, 9.0, 9.1, 9.2 LTS and 9.1/9.2 CD). The issue is an XML External Entity (XXE) injection that occurs while processing XML data, enabling a remote attacker to access sensitive information or exhaust memory resources. The IBM...

Malicious code in wcebpack-bunde-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a4300818daab208570421a84bcdd8e7b4950dcae1e6a5dd08f17d9e135497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-style-gloder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abaf94f96ee320ed4eff376e9267b0a7428caee6eadbef38504263a396534f43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daeyjds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08daa8db1f03525bec8bbe01df5687ff8e10686d01465fe24003dce21a8711ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in m5d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c0eefe62c7b256b4dce3e00d3a7ec577364f132a34f274a377bea8506c5bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2592 Malicious code in drftjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7731ea5a491675ed634316e383cd87428a37ab2da00dd1e87551fe7f9618ad9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2589 Malicious code in dr3scple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d508fc0838900576e17c54c3a83730379328931b687492e50c12d3e38dfcd41f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2231 Malicious code in createractclass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3a034e25308a4f0909ae6bd9d190557dd6febd0b8de2d96a367e23e157c0073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...