9988 matches found
CVE-2017-9231
CVE-2017-9231 is an XML External Entity (XXE) processing vulnerability in Citrix XenMobile Server (versions 9.x and 10.x prior to 10.5 RP3) that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server via unspecified vectors. The issue is caused by XX...
CVE-2016-9698
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference...
CVE-2016-9698
IBM Rhapsody DM is affected by CVE-2016-9698 due to an XML External Entity (XXE) processing flaw that can lead to denial of service and potential memory/resource exhaustion. Affected: Rational Software Architect/Design Manager versions 4.0.0–4.0.7, 5.0.0–5.0.2, and 6.0.0–6.0.2. Root cause: XXE in...
CVE-2017-9355
XML external entity XXE vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted XSPF playlist file...
Server side request forgery (ssrf)
XML external entity XXE vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted XSPF playlist file...
Xxe
IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...
CVE-2016-0254
IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...
CVE-2016-0254
IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...
CVE-2016-0254
IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...
Xxe
XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...
CVE-2015-7326
XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...
CVE-2015-7326
CVE-2015-7326 denotes an XML External Entity (XXE) vulnerability in Milton Webdav. Affected in Milton Webdav before 2.7.0.3, with concrete evidence in connected documents showing XXE injection paths via XML parsing in PROPFIND/PROPPATCH/LOCK handling where SAXParser configuration was insecure. Th...
CVE-2015-7326
XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...
Subsonic XML External Entity Injection Vulnerability
Subsonic is a media streaming server that allows users to save music or collect videos on the server. Subsonic suffers from an XML external entity injection vulnerability. An attacker could exploit the vulnerability to gain access to sensitive information or cause a denial of service...
Subsonic 6.1.1 - XML External Entity Injection
Subsonic 6.1.1 - XML External Entity Injection + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: ===============...
Trend Micro Control Manager XML External Entity Processing
An XML external entity processing vulnerability exists in Trend Micro Control Manager. The vulnerability is due to lack of validation of user-supplied input prior to executing an XML query. A remote, authenticated attacker could exploit this vulnerability by sending a malicious HTTP request to th...
Subsonic 6.1.1 XML External Entity Attack
Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming...
XML External Entity (XXE)
Zend Framework ZF1 is vulnerable to XML External Entity XXE attacks. Using these attacks, it is possible to read files, send HTTP requests to intranet servers and cause denial of service DoS conditions though CPU and memory consumption...
Multiple Hitachi Products XML External Entity Information Disclosure Vulnerability
Hitachi Device Manager is a suite of mobile device management software; Replication Manager is a suite of data replication software that simplifies Hitachi storage systems. An XML external entity information disclosure vulnerability exists in multiple Hitachi products. A remote attacker could...