435 matches found
CVE-2015-3907: Improper Restriction of XML External Entity Reference
CodeIgniter Rest Server aka codeigniter-restserver 2.7.1 allows XXE attacks...
CVE-2019-1903: Improper Restriction of XML External Entity Reference
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service DoS condition. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by sending maliciou...
CVE-2018-8940: Improper Restriction of XML External Entity Reference
ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML file and reference it in the URL of the application, forcing the application to load and parse the...
CVE-2019-11677: Improper Restriction of XML External Entity Reference
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...
CVE-2019-11519: Improper Restriction of XML External Entity Reference
Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations - Languages - Edit Language - Import Resources - Upload XML file" screen...
CVE-2019-0791: Improper Restriction of XML External Entity Reference
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795...
CVE-2019-0792: Improper Restriction of XML External Entity Reference
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795...
CVE-2019-0756: Improper Restriction of XML External Entity Reference
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'...
CVE-2019-0790: Improper Restriction of XML External Entity Reference
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0791, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795...
CVE-2019-9843: Improper Restriction of XML External Entity Reference
In DiffPlug Spotless before 1.20.0 library and Maven plugin and before 3.20.0 Gradle plugin, the XML parser would resolve external entities over both HTTP and HTTPS and didn't respect the resolveExternalEntities setting. For example, this allows disclosure of file contents to a MITM attacker if a...
CVE-2019-9658: Improper Restriction of XML External Entity Reference
Checkstyle before 8.18 loads external DTDs by default...
CVE-2019-0265: Improper Restriction of XML External Entity Reference
SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...
CVE-2019-7722: Improper Restriction of XML External Entity Reference
PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it either by direct modification or MITM attacks when using remote rulesets to perform information disclosure, denial of service, or request forgery...
CVE-2018-20733: Improper Restriction of XML External Entity Reference
BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...
CVE-2019-5748: Improper Restriction of XML External Entity Reference
In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks...
CVE-2018-20664: Improper Restriction of XML External Entity Reference
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license...
CVE-2018-7837
An Improper Restriction of XML External Entity Reference 'XXE' vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its outp...
CVE-2018-20318: Improper Restriction of XML External Entity Reference
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...
CVE-2018-2492: Improper Restriction of XML External Entity Reference
SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50...