CVE-2024-8010

The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the unescaped external entity references. By leveraging this vulnerability, a malicious actor can read confidential files...

EUVD-2025-25130

Malicious code in bioql PyPI...

SUSE CVE-2023-29450

JavaScript pre-processing can be used by the attacker to gain access to the file system read-only access on behalf of user "zabbix" on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...

CVE-2023-2161

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user...

PT-2017-13211

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions 11.3.03 and prior Description An issue with improper access control was found, allowing a local, non-administrator user to have privileges to read and write to the file system of the target machine. Recommendations F...

Adcon Telemetry A840 Telemetry Gateway Hardcoded Certificate Vulnerability

The Adcon Telemetry A840 Telemetry Gateway is the A840 series of gateway products from Adcon Telemetry, Germany. The Adcon Telemetry A840 Telemetry Gateway uses hard-coded certificates, which allows remote attackers to exploit the vulnerability to change the device configuration and read or write...

PT-2012-5614

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Space Management versions prior to 6.2.5.0 IBM Tivoli Storage Manager for Space Management versions 6.3.x prior to 6.3.1.0 Description The issue allows local users to read or modify file system objects. The exact...