7786 matches found
CVE-2014-125087
A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...
Xxe
A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...
CVE-2014-125087
A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...
PT-2023-10155 · Unknown · Java-Xmlbuilder
Name of the Vulnerable Software and Affected Versions: java-xmlbuilder versions up to 1.1 Description: A vulnerability was found in the software, rated as problematic. It affects some unknown functionality and leads to xml external entity reference. Recommendations: For versions up to 1.1, upgrad...
java-xmlbuilder 代码问题漏洞
java-xmlbuilder is James Murty personal developer of a utility program . It allows the construction of simple XML documents using relatively sparse Java code. A code issue exists in versions of java-xmlbuilder prior to 1.1, which stems from the presence of an unknown feature that causes xml...
VMSA-2023-0005:VMware vRealize Orchestrator update addresses an XML External Entity (XXE) vulnerability
Advisory ID: VMSA-2023-0005 CVSSv3 Range: 8.8 Issue Date:2023-02-21 Updated On: 2023-02-21 Initial Advisory CVEs: CVE-2023-20855 Synopsis: VMware vRealize Orchestrator update addresses an XML External Entity XXE vulnerability CVE-2023-20855 RSS Feed Download PDF Download Text File Share this page...
XML External Entity (XXE)
org.neo4j.procedure:apoc-core is vulnerable to XML External Entity XXE attacks. A remote authenticated attacker is able to trigger an XML external entity injection via the parseXML function which allows external entities to be resolved due to an improper configuration of the apoc.import.graphml...
SUSE CVE-2023-20052
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on a...
UBUNTU-CVE-2023-20052
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on a...
CVE-2022-39954
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11, FortiNAC version 8.7.0 through 8.7.6, FortiNAC version 8.6.0 through 8.6.5,...
Xxe
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11, FortiNAC version 8.7.0 through 8.7.6, FortiNAC version 8.6.0 through 8.6.5,...
CVE-2023-23926
APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...
Xxe
APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...
Neo4j 代码问题漏洞
Neo4j is a Java-based and fully ACID-compatible graphical database from the U.S. company Neo4j, which supports data migration, add-ons and more. A code issue vulnerability exists in Neo4j versions prior to 5.5.0 that stems from the presence of an XML External Entity XXE vulnerability, which can b...
PT-2023-3050 · Fortinet · Fortinac
Name of the Vulnerable Software and Affected Versions: FortiNAC versions 8.3.7 through 8.5.4 FortiNAC versions 8.6.0 through 8.6.5 FortiNAC versions 8.7.0 through 8.7.6 FortiNAC versions 8.8.0 through 8.8.11 FortiNAC versions 9.1.0 through 9.1.8 FortiNAC versions 9.2.0 through 9.2.7 FortiNAC...
PT-2023-19300 · Neo4J · Apoc
Name of the Vulnerable Software and Affected Versions: APOC versions prior to 5.5.0 APOC versions 4.4.0 through 4.4.0.13 Description: A XML External Entity XXE vulnerability was found in the apoc.import.graphml procedure of APOC core plugin in Neo4j graph database. This occurs when the XML parser...
CVE-2023-23926
CVE-2023-23926 is an XXE flaw in the APOC core plugin’s apoc.import.graphml for Neo4j. The XML parser was misconfigured, allowing external entities to be resolved, enabling reading local files, making HTTP requests, and potential DoS. Affected are APOC versions before 5.5.0 and 4.4.0.14 (4.4 bran...
CVE-2023-23926
APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...
SUSE CVE-2012-3488
The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to...