7854 matches found
DEBIAN-CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
UBUNTU-CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
CVE-2019-10782
CVE-2019-10782 affects com.puppycrawl.tools:checkstyle; all versions before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. Root cause: incomplete prior mitigation. Impact: XXE risk (per NVD: CVSS2 5.0/NETWORK, CVSS3 5.3/NETWORK). Exploitatio...
CVE-2019-10782
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658...
Security Bulletin: A security vulnerability was fixed in IBM Security Access Manager
Summary A XML External Entity Injection vulnerability was fixed in ISAM 9.0.7.1 Vulnerability Details CVEID: CVE-2019-4707 DESCRIPTION: IBM Security Access Manager Appliance is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...
The vulnerability of the XML platform’s syntactic analyzer, which is designed to enhance the effectiveness of educational materials and documentation. SAP Enable Now allows unauthorized access to protected information.
The vulnerability of the XML syntax analyzer on the SAP Enable Now platform, which is designed to improve the effectiveness of educational materials and documentation, is related to errors in XML link restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access ...
XXEinjector
This is an exploit module/toolkit targeting XXE XML eXternal Entity vulnerabilities. The primary CVE ID is not explicitly stated, but the tool is designed to automate exploitation of XXE vulnerabilities using direct and out-of-band methods. The target product/service is likely web applications,...
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2019-2256)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2019-1896)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2019-2433)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2017-1069)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apache Solr 3.6.0 < 4.1.0 XML External Entity
Apache Solr versions 3.6.0 4.1.0 allows remote attackers to have an unspecified impact via the 'UpdateRequestHandler' by injecting XML data containing an external entity declaration in conjunction with a valid entity reference, related to an XML External Entity XXE issue Note that the scanner has...
Apache Solr 3.6.0 < 4.3.1 XML External Entity
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does incorrectly uses the EmptyEntityResolver, allowing remote, unauthenticated attackers to have allows remote attackers to have an unspecified impact by injecting XML data containing an external entity declaration in conjunction wit...
Easy XML Editor 1.7.8 - XML External Entity Injection
Easy XML Editor 1.7.8 - XML External Entity Injection Exploit Title: Easy XML Editor 1.7.8 - XML External Entity Injection Exploit Author: Javier Olmedo Date: 2018-11-21 Vendor: Richard Wuerflein Software Link: https://www.edit-xml.com/EasyXMLEditor.exe Affected Version: 1.7.8 and before Patched...
Easy XML Editor 1.7.8 - XML External Entity Injection
Exploit Title: Easy XML Editor 1.7.8 - XML External Entity Injection Exploit Author: Javier Olmedo Date: 2018-11-21 Vendor: Richard Wuerflein Software Link: https://www.edit-xml.com/EasyXMLEditor.exe Affected Version: 1.7.8 and before Patched Version: unpatched Category: Local Platform: XML Teste...
XML External Entity (XXE)
mybatis-generator-core is vulnerable to XML External Entity XXE attacks. The vulnerability exists because the 'parseConfiguration' function in 'ConfigurationParser' does not restrict fetching and processing of external XML resources, allowing an attacker to inject and process malicious external...
