CVE-2022-31447

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

Xxe

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

CVE-2022-31447

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

PT-2022-4240 · Pki-Core +8 · Pki-Core +8

Name of the Vulnerable Software and Affected Versions: pki-core versions affected versions not specified Description: The issue is related to the incorrect restriction of XML external entities, which can lead to XML external entity XXE attacks. A remote attacker can potentially retrieve the conte...

Exploit for Improper Restriction of XML External Entity Reference in Rocketsoftware Ags-Zena

Zena Housekeeping notes: The original CookieMonster Repo can b...

CVE-2021-45981

NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...

Xxe

NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...

CVE-2021-45981

NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...

CVE-2021-45981

NetScout nGeniusONE 6.3.2 is affected by a XML External Entity (XXE) vulnerability. The issue arises in XML parsing, enabling an XXE attack that could impact confidentiality, integrity, and availability. CVSS metrics indicate high severity (CVSS 3.1: 9.8, CRITICAL) with network attack vector and ...

Netscout NgeniusOne 代码问题漏洞

Netscout NgeniusOne is a centralized application management and network performance solution from Netscout, Inc. A security vulnerability exists in Netscout NgeniusOne version 6.3.2, which can be exploited by attackers to launch XML External Entity XXE attacks...

VMware Tools 10.x / 11.x / 12.x < 12.0.5 XXE (VMSA-2022-0015)

The version of VMware Tools installed on the remote Windows host is affected by an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service...

OESA-2022-1674 obs-server security update

The Open Build Service OBS backend is used to store all sources and binaries.It also calculates the need for new build jobs and distributes it. Security Fixes: A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

GHSA-3VJC-5X79-M9R8 SilverStripe XXE Vulnerability in CSSContentParser

SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity XXE attacks. When this developer utility is misused for purposes involving external or user submitted data in custom...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

GHSA-M7M4-4VM8-55WG PyAMF vulnerable to XML external entity (XXE)

PyAMF provides Action Message Format AMF support for Python that is compatible with the Adobe Flash Player. It includes integration with Python web frameworks like Django, Pylons, Twisted, SQLAlchemy, web2py and more. XML external entity XXE vulnerability in PyAMF before 0.8.0 allows remote...

PyAMF vulnerable to XML external entity (XXE)

PyAMF provides Action Message Format AMF support for Python that is compatible with the Adobe Flash Player. It includes integration with Python web frameworks like Django, Pylons, Twisted, SQLAlchemy, web2py and more. XML external entity XXE vulnerability in PyAMF before 0.8.0 allows remote...

GHSA-QG7X-4H4Q-3M49 XML external entity (XXE) vulnerability in Jenkins

XML external entity XXE vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

GHSA-QJ27-W92H-FC9R XML external entity (XXE) vulnerability in Jenkins

XML external entity XXE vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query...

GHSA-VC42-MGR2-W34R Modoboa is vulnerable to an XML External Entity Injection (XXE)

The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML...