Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to gain access to protected information or cause service failures

The vulnerability of the libxml2 component in iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to gain access to sensitive information or cause service failures by using a specially crafted XML document...

CVE-2015-4162

XML external entity XXE vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data...

XML External Entity (XXE) Vulnerability

An XML parsing vulnerability exists in PAN-OS allowing a malicious user within PAN-OS to inject malicious XML data into the web-based device management front-end allowing the user to retrieve arbitrary content from the device. The user must be an authenticated user issuing the request. Ref 71273...

CVE-2015-4091

CVE-2015-4091 describes an XML External Entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4. The issue arises when the SAP XML parser at /sap.com/tc~sld~wd~main/Main processes incoming XML requests with a user-specified DTD (CIM UPLOAD), potentially allowing remote attackers to send TCP reque...

CVE-2014-0191

The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation i...

How to relieve Microsoft XML vulnerability risk-the vulnerability warning-the black bar safety net

Recently reported, Microsoft XML Core Services vulnerability is still computer users face the biggest risk, and more than 4 3% of users are running a vulnerable version. Can you explain why these problems still exist as well as to alleviate the problem the best way? ! How to relieve Microsoft XML...

CVE-2014-6259

Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka ZEN-15414, a similar issue to...

CVE-2014-6259

Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka ZEN-15414, a similar issue to...

CVE-2014-3090

Technical details about CVE-2014-3090 (IBM Rational ClearCase XML entity processing vulnerability) are not publicly provided in the supplied documents. Please monitor for updates from IBM or security advisories for affected versions and remediation guidance.

Moderate: Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.4.2 update

Red Hat Enterprise Virtualization Manager 3.4.2 is now available. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the References...

mysql: unspecified DoS related to XML (CPU April 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML...

PT-2014-1186 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.35 and earlier Oracle MySQL versions 5.6.15 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to XML in the MySQL Server component. Recommendations: For...

CVE-2013-6408

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

JDK: unspecified sandbox bypass (XML)

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors...

CentOS Update for php CESA-2013:1049 centos6

Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2013:1049 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

PT-2013-52: XML External Entities Injection in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Huawei SGSN USN9810. An XML document may contain a Document Type Definition that, among other features, allows the definition of external entities. A malicious user may perform attack...

Medium: libxml2

Issue Overview: libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear...

[SECURITY] [DSA 2659-1] libapache-mod-security security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2659-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 09, 2013 http://www.debian.org/security/faq -...

PT-2013-89: XML External Entities Resolution vulnerability in KingSCADA

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in KingSCADA. The vulnerability is possible due to unsafe parsing of XML external entities. If an attacker manages to make a victim open a project that contains specially crafted XML,...

PT-2013-13: XML External Entities Injection in SAP NetWeaver

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in SAP NetWeaver. The vulnerability was detected in the "Live Update" webdynpro application of SAP NetWeaver. The "Live Update" application located at...