10144 matches found
GHSA-2CFC-865J-GM4W XML External Entity Reference in detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
Xxe
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272
CVE-2022-0272 concerns the Kotlin static analysis tool detekt. Multiple connected sources confirm an XML External Entity (XXE) restriction flaw in detekt/detekt prior to 1.20.0, attributed to the XML processing path (e.g., the read function in BaselineFormat.kt). Impact details in the sources ali...
CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
Exploit for Improper Restriction of XML External Entity Reference in Hazelcast
CVE-2022-0265 把 ysoser...
FANUC ROBOGUIDE XML External Entity Injection Vulnerability
FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. FANUC ROBOGUIDE v9.40083.00.05 and earlier versions exist XML external entity injection vulnerability, which originates from the lack of application restrictions on external entities. An attacker could exploit this vulnerability to...
detekt 代码问题漏洞
detekt is a static code analysis tool for the Kotlin programming language. A security vulnerability exists in detekt that stems from an improperly restricted XML external entity reference...
Security Bulletin: Information disclosure for IBM Infosphere Global Name Management
Summary There is a potential information disclosure vulnerability in Global Name Management when using Enterprise Name Search. The information disclosure is due to an XML external entity XXE vulnerability. Customers not using Enterprise Name Search are not affected. Vulnerability Details CVEID:...
CVE-2021-43990
The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...
CVE-2021-43990
The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...
XML External Entity (XXE) Injection
fr.opensagres.xdocreport:fr.opensagres.xdocreport.document is vulnerable to XML external entity XXE injection attacks. A remote attacker is able to inject malicious XML input via a weakly configured XML parser in the preprocess function...
CVE-2021-43990 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...
PT-2022-11968 · Fanuc · Roboguide
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a network-based attack where threat actors supply a crafted, malicious XML payload. This payload is designed to trigger an external...
CVE-2022-21949
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue...
Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2022 CPU)
The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the April 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - An XML external entity vulnerability in the bundled jackson-databind component which allows an...
FANUC ROBOGUIDE 代码问题漏洞
FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. FANUC ROBOGUIDE v9.40083.00.05 and earlier versions exist XML external entity injection vulnerability, which originates from the lack of application restrictions on external entities. An attacker could exploit this vulnerability to...
SAP BusinessObjects Business Intelligence Platform XML外部实体注入漏洞
SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and enable...