23 matches found
CVE-2026-80110
A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...
EUVD-2022-27938
Malicious code in bioql PyPI...
CVE-2022-22795
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
Xxe
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
CVE-2022-22795
Signiant Manager+Agents is affected by an XML External Entity (XXE) vulnerability (CVE-2022-22795). The issue enables an attacker to read internal files on the compromised machine, with the product running as root on Linux and as NT/Authority on Windows, allowing access to sensitive files (e.g., ...
CVE-2022-22795 Signiant - Manager+Agents XML External Entity (XXE)
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
PT-2022-15684
Name of the Vulnerable Software and Affected Versions Signiant Manager+Agents affected versions not specified Description The issue allows an attacker to extract internal files of the affected machine through an XML External Entity XXE vulnerability. Since the product runs with root privileges on...
CVE-2022-22795: Improper Restriction of XML External Entity Reference
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
CVE-2022-22795
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
CVE-2021-46660
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
Signiant flight 代码问题漏洞
Signiant flight is a unique utility from Signiant USA for optimizing the transfer of large data sets to and from the cloud. A security vulnerability in Manager+Agents before Signiant flight deck 15.1 allows XML External Entity XXE attacks...
CVE-2021-46660
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
CVE-2021-46660
CVE-2021-46660 affects Signiant Manager+Agents prior to version 15.1 . The issue is an XML External Entity (XXE) vulnerability in XML processing. Per CVSS 3.1/2.0 metrics, the impact is High (confidentiality, integrity, availability) with network vector and no user interaction. Remediation: upgra...
PT-2022-12895
Name of the Vulnerable Software and Affected Versions Signiant Manager+Agents versions prior to 15.1 Description The issue allows XML External Entity XXE attacks. XML External Entity attacks occur when an application parses XML input that contains malicious external entities, which can lead to...
CVE-2021-46660: Improper Restriction of XML External Entity Reference
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
CVE-2019-8996
In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...
Command injection
In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...
CVE-2019-8996
The CVE-2019-8996 entry affects Signiant Manager+Agents prior to version 13.5, where the set command implementation exposes a Buffer Overflow vulnerability. Public sources consistently describe the issue as a buffer overflow in the set command, potentially enabling remote exploitation via the net...
CVE-2019-8996
In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...
CVE-2019-8996: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow...