9920 matches found
CVE-2017-3839
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases:...
CVE-2017-3839
CVE-2017-3839 is an XML External Entity (XXE) vulnerability in Cisco Secure Access Control System (ACS) web UI. An unauthenticated, remote attacker could read part of the information stored on the affected device. Root cause: improper handling of XML entities in the web framework. Affected releas...
IBM Rational Rhapsody Design Manager XML External Entity Injection Vulnerability
IBM Rational Rhapsody Design Manager is a Jazz-based platform from IBM that helps systems engineers apply Model-Based Systems Engineering MBSE through SysML to help embedded software developers dismantle engineering silos and collaborate with key stakeholders, such as managers, quality managers,...
IBM Integration Bus and WebSphere Message Broker XML External Entity Injection Vulnerability
IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. An XML external entity injection...
eParakstitajs and eParaksts XML External Entity Injection Vulnerabilities
e-Me eParakstitajs is a software developed by AIT Microsoft Glossaries Team in the category Miscellaneous Shareware. An XML External Entity Injection vulnerability exists in eParakstitajs and eParaksts. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial...
Grails PDF Plugin 0.6 - XML External Entity Injection
Exploit Title: Grails PDF Plugin 0.6 XXE Date: 21/02/2017 Vendor Homepage: http://www.grails.org/plugin/pdf Software Link: https://github.com/aeischeid/grails-pdfplugin Exploit Author: Charles FOL Contact: https://twitter.com/ambionics Website: https://www.ambionics.io/blog/grails-pdf-plugin-xxe...
Openpyxl XML External Entity Injection Vulnerability
Openpyxl is a Python library for reading and writing Excel 2010. An XML external entity injection vulnerability exists in Openpyxl version 2.4.1. A remote attacker can exploit this vulnerability to read a local file with the help of a specially crafted document, resulting in a denial of service t...
Grails PDF Plugin 0.6 - XML External Entity Injection
Grails PDF Plugin 0.6 - XML External Entity Injection Exploit Title: Grails PDF Plugin 0.6 XXE Date: 21/02/2017 Vendor Homepage: http://www.grails.org/plugin/pdf Software Link: https://github.com/aeischeid/grails-pdfplugin Exploit Author: Charles FOL Contact: https://twitter.com/ambionics Website...
Xxe
XML external entity XXE vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows remote attackers to read arbitrary files or possibly have unspecified other impact via a crafted edoc file...
CVE-2017-6055
XML external entity XXE vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows remote attackers to read arbitrary files or possibly have unspecified other impact via a crafted edoc file...
CVE-2016-4312
XML external entity XXE vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, o...
CVE-2016-4312
XML external entity XXE vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, o...
SAP Netweaver Visual Composer XML External Entity Injection Information Disclosure Vulnerability
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform, the platform can provide development and operation environment for SAP applications. An information disclosure vulnerability exists in SAP Netweaver Visual Composer. An attacker could exploit th...
Cisco Secure Access Control System XML External Entity Information Disclosure Vulnerability
Cisco Secure Access Control System ACS, is the core component of the TrustSec solution of the U.S. Cisco Cisco company, is able to provide RADIUS and TACACS + services of the policy management platform, is the realization of the enterprise network access policy and identity management platform. A...
CVE-2016-4312
XML external entity XXE vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, o...
XML External Entity (XXE)
jooq is vulnerable to XML external entity attacks. It is possible because XMLasDOMBinding does not prevent the resolution of external entity references, allowing the attackers to submit malicious XML to the XML parser and gain access to information about an internal network, local file system, or...
Cisco Secure Access Control System XML External Entity Vulnerability
A vulnerability in the web-based user interface of the Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...
CVE-2016-9706
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all...
CVE-2016-9706
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all...