UBUNTU-CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

CVE-2022-0217

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

CVE-2022-0217: Improper Restriction of Recursive Entity References in DTDs

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...

IBM MQ XXE (6613021)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 6613021 advisory. - IBM MQ Explorer is vulnerable to an XML External Entity Injection XXE attack due to improper XML validation in the import Wizard. CVE-2022-22489 Note that Nessus has not...

CVE-2022-22489

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

CVE-2022-22489

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

Xxe

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

CVE-2022-22489

CVE-2022-22489 affects IBM MQ and IBM MQ Explorer components (versions 8.0, 9.0, 9.1, 9.2 LTS and 9.1/9.2 CD). The issue is an XML External Entity (XXE) injection that occurs while processing XML data, enabling a remote attacker to access sensitive information or exhaust memory resources. The IBM...

Malicious code in wcebpack-bunde-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a4300818daab208570421a84bcdd8e7b4950dcae1e6a5dd08f17d9e135497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-style-gloder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abaf94f96ee320ed4eff376e9267b0a7428caee6eadbef38504263a396534f43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daeyjds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08daa8db1f03525bec8bbe01df5687ff8e10686d01465fe24003dce21a8711ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in m5d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c0eefe62c7b256b4dce3e00d3a7ec577364f132a34f274a377bea8506c5bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2589 Malicious code in dr3scple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d508fc0838900576e17c54c3a83730379328931b687492e50c12d3e38dfcd41f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2592 Malicious code in drftjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7731ea5a491675ed634316e383cd87428a37ab2da00dd1e87551fe7f9618ad9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2231 Malicious code in createractclass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3a034e25308a4f0909ae6bd9d190557dd6febd0b8de2d96a367e23e157c0073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-4347 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge versions 2020 SP2 Patch 04201.2111.1802.0000 Description: The issue is related to the improper restriction of XML External Entity XXE references in the LoadImportedLibraries method, allowing remote attackers to disclose sensitive...

CVE-2022-22489: Improper Restriction of XML External Entity Reference

IBM MQ 8.0, 9.0, 9.1, 9.2 LTS, and 9.1 and 9.2 CD are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339...

PT-2022-15468 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0 through 9.2 Description: The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data, potentially exposing sensitive information or consuming memory resources...

Vulnerability fixed in IBM MQ

IBM has fixed a vulnerability in IBM MQ. Through an XML External Entity Injection XXE, a malicious party can cause a Denial-of-Service by running the MQ environment out of memory run, or gain access to sensitive information. IBM has released updates to fix the vulnerability in MQ 8.0, 9.1 and 9.2...

The vulnerability of the pki-core package in the Red Hat Enterprise Linux operating system allows attackers to perform XXE attacks.

The vulnerability of the pki-core package in the Red Hat Enterprise Linux operating system is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...