10963 matches found
Siemens Comos 代码问题漏洞
COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. Siemens COMOS suffers from an XXE injection vulnerability that can be exploited by an...
SAP NetWeaver AS 代码问题漏洞
SAP NetWeaver AS is an SAP web application server from SAP, Germany. It not only provides web services, but is also the basic platform for SAP software. A code issue vulnerability exists in SAP NetWeaver AS JAVA, which stems from a lack of validation of XML inputs, allowing an unauthenticated...
Siemens Comos 代码问题漏洞
COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. Siemens COMOS suffers from an XXE injection vulnerability that can be exploited by an...
PT-2024-36012 · Siemens · Comos
Name of the Vulnerable Software and Affected Versions: COMOS V10.3 versions prior to V10.3.3.5.8 COMOS V10.4.0 versions prior to V10.4.0 COMOS V10.4.1 versions prior to V10.4.1 COMOS V10.4.2 versions prior to V10.4.2 COMOS V10.4.3 versions prior to V10.4.3.0.47 COMOS V10.4.4 versions prior to...
Adobe Reader < 20.005.30748 / 24.005.20320 Multiple Vulnerabilities (APSB24-92)
The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30748 or 24.005.20320. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a...
CVE-2024-54005: Improper Restriction of XML External Entity Reference
A vulnerability has been identified in COMOS V10.3 All versions V10.3.3.5.8, COMOS V10.4.0 All versions, COMOS V10.4.1 All versions, COMOS V10.4.2 All versions, COMOS V10.4.3 All versions V10.4.3.0.47, COMOS V10.4.4 All versions V10.4.4.2, COMOS V10.4.4.1 All versions V10.4.4.1.21. The PDMS/E3D...
CVE-2024-49535: Improper Restriction of XML External Entity Reference
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity...
CVE-2024-49064: Improper Restriction of XML External Entity Reference
Microsoft SharePoint Information Disclosure Vulnerability...
PT-2024-33656 · Siemens · Comos
Name of the Vulnerable Software and Affected Versions: COMOS V10.3 versions prior to V10.3.3.5.8 COMOS V10.4.0 versions prior to V10.4.4.2 COMOS V10.4.1 versions prior to V10.4.4.2 COMOS V10.4.2 versions prior to V10.4.4.2 COMOS V10.4.3 versions prior to V10.4.3.0.47 COMOS V10.4.4 versions prior ...
CVE-2024-47582: Improper Restriction of XML External Entity Reference
Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application...
Adobe Acrobat < 20.005.30748 / 24.001.30225 / 24.005.20320 Multiple Vulnerabilities (APSB24-92)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30748, 24.001.30225, or 24.005.20320. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier a...
GHSA-32R8-54HF-C9P3 unstructured XML External Entity (XXE)
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
unstructured XML External Entity (XXE)
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
XML External Entity (XXE) Injection
Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the XMLParser. An attacker can access sensitive data or cause denial of service by supplying malicious XML content...
CVE-2024-46455
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Jdom-1.0
Summary A vulnerability has been identified in Jdom version 1.0, which is used in IBM Engineering Lifecycle Management - IBM Jazz. This bulletin contains information regarding vulnerabilities and remediation actions. Vulnerability Details CVEID:CVE-2021-33813 DESCRIPTION: JDOM is vulnerable to a...
Unstructured 安全漏洞
Unstructured is an open source preprocessor for unstructured data from Unstructured Open Source. A security vulnerability exists in Unstructured 0.14.2 and earlier versions, which stems from vulnerability to XML External Entity XXE attacks via XMLParser...
CVE-2024-46455
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
PT-2024-31995
Name of the Vulnerable Software and Affected Versions unstructured versions prior to 0.14.2 Description The issue is related to an XML External Entity XXE vulnerability via the XMLParser. This vulnerability affects the unstructured tool. Recommendations For versions prior to 0.14.2, as a temporar...
