The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to the use of memory after its release use-after-free error when processing C Markup objects. This vulnerability allows attackers to execute arbitrary code or cause a service failure through a specially created website...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

Internet Explorer includes a vulnerability related to the use of memory after it is freed use-after-free error in the C Markup::IsConnectedToPrimaryMarkup function. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code or cause service failures using...

The vulnerability of the automated system for managing technological processes, KingSCADA, allows a remote attacker to perform a maintenance failure, provided that the user opens a specially crafted XML document.

The vulnerability of the automated system for managing technological processes, KingSCADA, is related to the unsafe processing of external XML entities. Exploiting this vulnerability allows a malicious attacker to perform a service failure, provided that the user opens a specially crafted XML...

ALPINE-CVE-2016-4472

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and...

DEBIAN-CVE-2016-4472

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and...

CA Release Automation Denial of Service Vulnerability

CA Release Automation formerly CA LISA Release Automation is a suite of enterprise-class release automation solutions from CA USA. The solution enables continuous delivery across the application lifecycle and can streamline and execute application releases, centralize application operations from...

python-docx XML External Entity Vulnerability

python-docx is a python library for editing and generating Microsoft Word documents. An XML external entity vulnerability exists in python-docx version 0.8.5. An attacker can exploit this vulnerability to conduct an XML external entity attack...

Six Apart Movable Type Pro and Advanced SQL Injection Vulnerabilities

Six Apart Movable Type MT is a blogging system from Six Apart Inc. in the U.S. Pro and Advanced are the professional and advanced versions of the system, respectively. A SQL injection vulnerability exists in Six Apart MT Pro and Advanced. The vulnerability can be exploited to execute arbitrary SQ...

Pidgin MXIT Markup Command Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2016-0133 Pidgin MXIT Markup Command Denial of Service Vulnerability June 21, 2016 CVE Number CVE-2016-2365 DESCRIPTION A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could...

Pidgin MXIT mxit_convert_markup_tx Information Leak Vulnerability

Talos Vulnerability Report TALOS-2016-0123 Pidgin MXIT mxitconvertmarkuptx Information Leak Vulnerability June 21, 2016 CVE Number CVE-2016-2380 DESCRIPTION An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially...

The vulnerability of the PHP interpreter, allowing attackers to execute XXE and XXL attacks

The vulnerability of the ext/libxml/libxml.c file in the PHP interpreter arises from the fact that, when using PHP-FPM, the isolation of individual data threads is not properly implemented. Exploiting this vulnerability allows a remote attacker to execute XXE and XXL attacks using a specially...

Framework: denial-of-service attack with XML input

A denial of service flaw was found in the way Spring processes inline DTD declarations. A remote attacker could submit a specially crafted XML file that would cause out-of-memory errors when parsed...

Framework: denial-of-service attack with XML input

A denial of service flaw was found in the way Spring processes inline DTD declarations. A remote attacker could submit a specially crafted XML file that would cause out-of-memory errors when parsed...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions or execute arbitrary code

The vulnerability of iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted XML document...

DEBIAN-CVE-2015-5714

Cross-site scripting XSS vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags...

IBM Rational Team Concert Denial of Service Vulnerability

IBM Rational Team Concert RTC is a software lifecycle management solution based on the Jazz platform and supports decentralized teams to collaborate in real time. A security vulnerability exists in IBM Rational Team Concert's handling of external entities containing malicious XML, which could be...

DEBIAN-CVE-2016-1837

Multiple use-after-free vulnerabilities in the 1 htmlPArsePubidLiteral and 2 htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a...

UBUNTU-CVE-2016-1840

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

UBUNTU-CVE-2016-1833

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

Cisco Adaptive Security Appliance Denial of Service Vulnerability (CNVD-2016-03383)

Cisco Adaptive Security Appliance ASA, Adaptive Security Appliance is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. A security vulnerability exists in the XML parse...