EUVD-2021-27687

Malicious code in bioql PyPI...

EUVD-2021-27686

Malicious code in bioql PyPI...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

Design/Logic Flaw

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

Xxe

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

CVE-2021-40510 affects OBDA system Mastro 1.0. It is an XML External Entity (XXE) vulnerability that allows remote attackers to read system files via crafted DTDs. The NVD entry indicates network access with low complexity and no authentication (CVSS3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base ...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40511

The CVE concerns OBDA systems Mastro 1.0, vulnerable to XML Entity Expansion (billion laughs) that enables denial of service. The root cause is XML entity expansion handling in Mastro 1.0, enabling resource exhaustion. Documented impact is a denial of service; no public exploit details or patch/v...