PT-2022-27497 · Jenkins · Jenkins Cccc Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CCCC Plugin version 0.6 and earlier Description: The issue is related to the configuration of the XML parser, which does not prevent XML external entity XXE attacks. Recommendations: For Jenkins CCCC Plugin version 0.6 and earlier,...

Jenkins Plugin SourceMonitor 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A code issue vulnerabilit...

PT-2022-27488 · Jenkins · Jenkins Violations Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Violations Plugin versions 0.7.11 and earlier Description: The issue arises from the Jenkins Violations Plugin not configuring its XML parser to prevent XML external entity XXE attacks. This allows attackers to control XML input files...

Exploit for Improper Restriction of XML External Entity Reference in Wordpress

exploitcve-2021-29447 For educational purposes only. This e...

MAL-2022-6289 Malicious code in stale-props (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b9ec16df0705291e585234cf48aa58f355eadeaf165424181e35c728757468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-27005 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS formerly concrete5 versions below 8.5.10 Concrete CMS formerly concrete5 versions 9.0.0 through 9.1.2 Description: The issue allows for XXE based DNS requests, which can lead to IP disclosure. This occurs due to a vulnerability i...

CVE-2022-45194

CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure...

AlmaLinux 8 : pki-core:10.6 and pki-deps:10.6 (ALSA-2022:7470)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7470 advisory. pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 Tenable has extracted the preceding description block directly from the...

Bruhn NewTech CBRN-Analysis 代码问题漏洞

Bruhn NewTech CBRN-Analysis is an advanced, off-the-shelf CBRN defense knowledge management software application from Bruhn NewTech. It provides knowledge management, hazard prediction, and warning and reporting W&R capabilities to support operational planning and execution. A security...

Exploit for Improper Restriction of XML External Entity Reference in Wordpress

WordPress CVE-2021-29447 exploit Exploit WordPress Media Libr...

PT-2022-27424 · Unknown · Cbrn-Analysis

Name of the Vulnerable Software and Affected Versions: CBRN-Analysis versions prior to 22 Description: The issue allows XXE attacks via an XML document, leading to NTLMv2-SSP hash disclosure. This occurs when processing a malicious XML document. Recommendations: For versions prior to 22, update t...

Cisco Firepower Management Center Software XML External Entity Injection Vulnerability

A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to view sensitive information. This vulnerability is due to insufficient validation of the XML syntax when importing a...

Security Bulletin: IBM Security Guardium is affected by a postgresql-42.0.0.jar vulnerability

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2020-13692 DESCRIPTION: PostgreSQL JDBC Driver could allow a remote authenticated attacker to obtain sensitive information, caused by an XML external entity XXE error when processing XML data. By sending...

pki-core: access to external entities when parsing XML can lead to XXE

A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...

Exploit for Improper Restriction of XML External Entity Reference in Wordpress

CVE-2021-29447 Proof of Concept Proof of Concept for CVE-2021...

Jenkins Filesystem Trigger Plugin XML External Entity Expansion (CVE-2021-21659)

An XML external entity expansion vulnerability exists in Jenkins Filesystem Trigger Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

IBM InfoSphere Information Server XML External Entity Injection (XXE) Vulnerability

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM, Inc. The platform can be used to integrate data information obtained from various sources.IBM InfoSphere Information Server version 11.7 contains an XML External Entity Injection XXE...

CVE-2022-43570

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language XML external entity XXE injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error...

Xxe

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language XML external entity XXE injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error...

CVE-2022-43570 XML External Entity Injection through a custom View in Splunk Enterprise

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language XML external entity XXE injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error...