11406 matches found
CVE-2022-31447
An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
Xxe
An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
CVE-2022-31447
An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
CVE-2022-32285: Improper Restriction of XML External Entity Reference
A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. The affected module is vulnerable to XML External Entity XXE attacks due to...
Siemens Mendix SAML Module 代码问题漏洞
The Mendix SAML Module allows authentication of users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An XML external entity reference vulnerability exists in Siemens Mendix SAML Module, which can be exploited by...
PT-2022-4240
Name of the Vulnerable Software and Affected Versions pki-core versions affected versions not specified Description The issue is related to the incorrect restriction of XML external entities, which can lead to XML external entity XXE attacks. A remote attacker can potentially retrieve the content...
Malicious code in misk-web-tab-template-basic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5ad7e61d179d5150addce9f3bd9838c06999a4f076ed576677b36505796638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Improper Restriction of XML External Entity Reference in Rocketsoftware Ags-Zena
Zena Housekeeping notes: The original CookieMonster Repo can b...
CVE-2021-45981
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
CVE-2021-45981
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
CVE-2021-45981
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
Xxe
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
CVE-2021-45981
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
CVE-2021-45981
NetScout nGeniusONE 6.3.2 is affected by a XML External Entity (XXE) vulnerability. The issue arises in XML parsing, enabling an XXE attack that could impact confidentiality, integrity, and availability. CVSS metrics indicate high severity (CVSS 3.1: 9.8, CRITICAL) with network attack vector and ...
Netscout NgeniusOne 代码问题漏洞
Netscout NgeniusOne is a centralized application management and network performance solution from Netscout, Inc. A security vulnerability exists in Netscout NgeniusOne version 6.3.2, which can be exploited by attackers to launch XML External Entity XXE attacks...
CVE-2021-45981: Improper Restriction of XML External Entity Reference
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
XML External Entity (XXE)
xmlbeans is vulnerable to XML External Entity attacks. The vulnerability exists due to the lack of sanitization of XML input containing a reference to an external entity which is processed by a weakly configured XML parser allowing an attacker to exhaust the system resource via recursive external...
VMware Tools 10.x / 11.x / 12.x < 12.0.5 XXE (VMSA-2022-0015)
The version of VMware Tools installed on the remote Windows host is affected by an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service...
OESA-2022-1674 obs-server security update
The Open Build Service OBS backend is used to store all sources and binaries.It also calculates the need for new build jobs and distributes it. Security Fixes: A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference...