IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

CVE-2026-91878

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91878

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91878

Dell OpenManage Ansible Modules , versions 6.0.0 through 10.0.3 , are vulnerable to an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability within the XML data conversion component . A low privileged attacker with remote access could exp...

EUVD-2026-123697

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

PT-2026-145439

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91878: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements…

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-13284

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this...

EUVD-2026-117068

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this...

CVE-2026-57486

A flaw was found in pupnp. A remote attacker could cause a Denial of Service DoS by sending specially crafted XML data to an affected application. Due to improper validation of null values during XML node comparisons, processing this input triggers a NULL pointer dereference that crashes the...

PT-2026-137169

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this...

PT-2026-137168

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this...

Oracle WebLogic Server - Remote Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. id: CVE-2019-2725 info: name: Oracle WebLogic...

CVE-2026-116154

A flaw was found in ImageMagick. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting specially crafted, deeply nested XML data. When processing the input, the application fails to release allocated memory upon reaching the nesting depth limit, resulting in...

Asymmetric Resource Consumption (Amplification)

Overview Affected versions of this package are vulnerable to Asymmetric Resource Consumption Amplification through the processing of signed XML data, where input-depth and operation-count limits are not properly enforced, DTD processing is not prohibited by default, and entity references and...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...