484 matches found
CVE-2018-10600: Improper Restriction of XML External Entity Reference
SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution in certain situations on specific platforms, and denial of service attacks...
CVE-2018-14065: Improper Restriction of XML External Entity Reference
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...
CVE-2016-9491: Improper Restriction of XML External Entity Reference
ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /register.do page most likely limited to administrator, to browse the filesystem and read the system files, including Applications Manager configuration, stored private keys, etc. By...
CVE-2018-0765: Improper Restriction of XML External Entity Reference
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework...
CVE-2017-6323: Improper Restriction of XML External Entity Reference
The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6, and ITMS 7.6POSTHF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service,...
CVE-2018-2401: Improper Restriction of XML External Entity Reference
SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...
CVE-2018-6489: Improper Restriction of XML External Entity Reference
XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...
CVE-2017-5828: Improper Restriction of XML External Entity Reference
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2018-2392: Improper Restriction of XML External Entity Reference
Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...
CVE-2018-1307: Improper Restriction of XML External Entity Reference
In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD type of attacks. Mitigation is to use...
CVE-2018-1000012: Improper Restriction of XML External Entity Reference
Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...
CVE-2018-1000009: Improper Restriction of XML External Entity Reference
Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...
CVE-2017-15639: Improper Restriction of XML External Entity Reference
tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...
CVE-2014-0030: Improper Restriction of XML External Entity Reference
The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity XXE attacks via unspecified vectors...
CVE-2017-12620: Improper Restriction of XML External Entity Reference
When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache...
CVE-2015-7241: Improper Restriction of XML External Entity Reference
XML External Entity XXE vulnerability in SAP Netweaver before 7.01...
Siemens OPC UA Protocol Stack Discovery Service (Update E)
CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Industrial products using the Discovery Service of the OPC UA protocol stack by the OPC foundation Vulnerability: Improper Restriction of XML External Entity Reference AFFECTED PRODUCTS Siemens...
CVE-2017-7664: Improper Restriction of XML External Entity Reference
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0...
CVE-2017-8557: Improper Restriction of XML External Entity Reference
Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a...