CVE-2022-41226

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

XXE vulnerability in compuware-common-configuration

compuware-common-configuration 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to change the contents of the Topaz Workbench CLI home directory on agents to have Jenkins parse a crafted file that uses external entities fo...

CVE-2022-41226: Improper Restriction of XML External Entity Reference

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Jenkins RQM Plugin 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A code issue vulnerabilit...

GHSA-4RV7-WJ6M-6C6R Denial of Service due to parser crash

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

Denial of Service due to parser crash

Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack. This...

GHSA-9FWF-46G9-45RX Denial of Service via stack overflow

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to serialise XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

Denial of Service via stack overflow

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to serialise XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

Denial of Service due to parser crash

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

Duplicate Advisory: Denial of Service due to parser crash

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f8cc-g7j8-xxpm. This link is maintained to preserve external references. Original Description Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running...

Denial of Service via stack overflow

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to serialise XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

GHSA-5HC5-C3M9-8VCJ Denial of Service via stack overflow

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to serialise XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

GHSA-FV22-XP26-MM9W Denial of Service due to parser crash

Withdrawn This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue here for more information. Original Despcription Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

CVE-2022-40151

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

CVE-2022-40152

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks DOS if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

CVE-2022-40152

CVE-2022-40152 is a vulnerability in Woodstox/libwoodstox-java where XML parsing with DTD support enabled can crash the parser (stack overflow), enabling potential denial-of-service. Connected documents confirm the same issue affecting Woodstox/libwoodstox-java (Astra Linux bulletin) and referenc...

CVE-2022-40150: Uncontrolled Resource Consumption

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack...

CVE-2022-40151: Stack-based Buffer Overflow

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

RHEL 7 : OpenShift Container Platform 4.4.33 (RHSA-2021:0282)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0282 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Security Bulletin: A CVE-2021-37714 vulnerability in jsoup affects IBM Process Designer in IBM Business Automation Workflow and IBM Business Process Manager

Summary A vulnerabilitiy exists in jsoup used by the desktop version of IBM Process Designer. IBM Process Designer has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-37714 DESCRIPTION: jsoup is vulnerable to a denial of service, caused by improper input validation. By sending ...