CVE-2015-5970: Improper Control of Generation of Code

The ChangePassword RPC method in Novell ZENworks Configuration Management ZCM 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference...

PT-2016-1416

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management versions 11.3 through 11.4 Description The issue is related to the ChangePassword RPC method, which allows remote attackers to conduct XPath injection attacks and read arbitrary text files via a malform...

PT-2015-4117

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP10 IBM DB2 versions 9.8 through 9.8 FP5 IBM DB2 versions 10.1 through 10.1 FP4 IBM DB2 versions 10.5 through 10.5 FP5 Description The issue allows remote authenticated users to read arbitrary text files via a...

PT-2013-5575

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager DCNM versions prior to 6.21 Description The issue allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML...