Lucene search
+L

10144 matches found

OSV
OSV
added 2022/04/22 12:00 a.m.22 views

GHSA-2CFC-865J-GM4W XML External Entity Reference in detekt

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

7.3CVSS9.5AI score0.01417EPSS
SaveExploits1References4
NVD
NVD
added 2022/04/21 5:15 p.m.30 views

CVE-2022-0272

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

9.8CVSS0.01417EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/21 5:15 p.m.6 views

CVE-2022-0272

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

9.8CVSS7.2AI score0.01417EPSS
SaveExploits1References3
Prion
Prion
added 2022/04/21 5:15 p.m.20 views

Xxe

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

7.5CVSS9.5AI score0.01417EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/04/21 4:20 p.m.125 views

CVE-2022-0272

CVE-2022-0272 concerns the Kotlin static analysis tool detekt. Multiple connected sources confirm an XML External Entity (XXE) restriction flaw in detekt/detekt prior to 1.20.0, attributed to the XML processing path (e.g., the read function in BaselineFormat.kt). Impact details in the sources ali...

9.8CVSS8.4AI score0.01417EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/04/21 4:20 p.m.25 views

CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

7.3CVSS7.7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/04/21 4:20 p.m.43 views

CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

7.3CVSS9.8AI score0.01417EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2022/04/21 8:24 a.m.420 views

Exploit for Improper Restriction of XML External Entity Reference in Hazelcast

CVE-2022-0265 把 ysoser...

9.8CVSS8.5AI score0.02792EPSS
SaveExploits2
CNVD
CNVD
added 2022/04/21 12:00 a.m.70 views

FANUC ROBOGUIDE XML External Entity Injection Vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. FANUC ROBOGUIDE v9.40083.00.05 and earlier versions exist XML external entity injection vulnerability, which originates from the lack of application restrictions on external entities. An attacker could exploit this vulnerability to...

6.1CVSS2.7AI score0.00682EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.14 views

detekt 代码问题漏洞

detekt is a static code analysis tool for the Kotlin programming language. A security vulnerability exists in detekt that stems from an improperly restricted XML external entity reference...

9.8CVSS7.6AI score0.01417EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/20 5:04 p.m.26 views

Security Bulletin: Information disclosure for IBM Infosphere Global Name Management

Summary There is a potential information disclosure vulnerability in Global Name Management when using Enterprise Name Search. The information disclosure is due to an XML external entity XXE vulnerability. Customers not using Enterprise Name Search are not affected. Vulnerability Details CVEID:...

8.2CVSS7.4AI score0.03851EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2022/04/20 4:15 p.m.29 views

CVE-2021-43990

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...

6.1CVSS0.00682EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/20 4:15 p.m.7 views

CVE-2021-43990

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...

5.3CVSS5.8AI score0.00682EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/04/20 4:09 p.m.18 views

XML External Entity (XXE) Injection

fr.opensagres.xdocreport:fr.opensagres.xdocreport.document is vulnerable to XML external entity XXE injection attacks. A remote attacker is able to inject malicious XML input via a weakly configured XML parser in the preprocess function...

5.9AI score
SaveExploits0
Cvelist
Cvelist
added 2022/04/20 3:30 p.m.36 views

CVE-2021-43990 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...

6.1CVSS6.5AI score0.00682EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/04/20 12:00 a.m.9 views

PT-2022-11968 · Fanuc · Roboguide

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a network-based attack where threat actors supply a crafted, malicious XML payload. This payload is designed to trigger an external...

6.1CVSS5.4AI score0.00682EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/04/20 12:00 a.m.8 views

CVE-2022-21949

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue...

9CVSS7.3AI score0.01786EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/04/20 12:00 a.m.79 views

Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2022 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the April 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - An XML external entity vulnerability in the bundled jackson-databind component which allows an...

9.8CVSS8.1AI score0.97906EPSS
SaveExploits10References11
CNNVD
CNNVD
added 2022/04/19 12:00 a.m.9 views

FANUC ROBOGUIDE 代码问题漏洞

FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. FANUC ROBOGUIDE v9.40083.00.05 and earlier versions exist XML external entity injection vulnerability, which originates from the lack of application restrictions on external entities. An attacker could exploit this vulnerability to...

6.1CVSS5.7AI score0.00682EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/04/15 12:00 a.m.31 views

SAP BusinessObjects Business Intelligence Platform XML外部实体注入漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and enable...

8.1CVSS2.5AI score0.12476EPSS
SaveExploits4References1
Rows per page
Query Builder