CVE-2018-1000644

Known CVE-2018-1000644 affects Eclipse RDF4j

CVE-2018-1000651

Stroom version 5.4.5 contains a XML External Entity XXE vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file...

CVE-2018-1000652

JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This...

CVE-2018-1000644

Eclipse RDF4j version 2.4.0 Milestone 2 contains a XML External Entity XXE vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially...

CVE-2018-1000652

JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This...

CVE-2018-1000644: Improper Restriction of XML External Entity Reference

Eclipse RDF4j version 2.4.0 Milestone 2 contains a XML External Entity XXE vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially...

PT-2018-9497

Name of the Vulnerable Software and Affected Versions Eclipse RDF4j versions prior to 2.4.0 Milestone 2 Description The issue concerns a XML External Entity XXE vulnerability in the RDF4j XML parser when parsing RDF files. This can lead to the disclosure of confidential data, denial of service,...

PT-2018-9504

Name of the Vulnerable Software and Affected Versions Stroom versions prior to 5.4.5 Description The issue is related to a XML External Entity XXE vulnerability in the XML Parser, which can lead to disclosure of confidential data, denial of service, server-side request forgery, and port scanning...

CVE-2018-1000651: Improper Restriction of XML External Entity Reference

Stroom version 5.4.5 contains a XML External Entity XXE vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file...

CVE-2018-13417

In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...

Security Bulletin: Apache Xerces-C vulnerabilities (XML4C) affects IBM Cloud Manager with OpenStack (CVE-2016-0729)

Summary IBM Cloud Manager with Openstack is vulnerable to a Apache Xerces-C XML Parser library vulnerablities. Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking during processing and error reporting. By sending specially crafted input...

Security Bulletin: Apache Xerces-C vulnerabilities affects IBM Cloud Manager with OpenStack (CVE-2016-4463)

Summary IBM Cloud Manager with Openstack is vulnerable to a Apache Xerces-C XML Parser library vulnerablities. Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing a deeply nested DTD. A remote attacker could exploit this...

JetBrains IntelliJ IDEA XML parser XML External Entity Injection Vulnerability

JetBrains IntelliJ IDEA is the Czech Republic JetBrains set of integrated development environment for the Java language . XML parser is one of the XML parser . An XML external entity injection vulnerability exists in the XML parser in JetBrains IntelliJ IDEA, which can be exploited to retrieve...

CVE-2016-8526

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities XXE. XXEs are a way to permit XML parsers to access storage that exist on external systems. If an unprivileged user is permitted to control the contents of XML files, XXE can be used as an attac...

Xxe

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml...

CVE-2017-8316

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml...

CVE-2017-8316

This CVE (CVE-2017-8316) affects JetBrains IntelliJ IDEA’s XML parser. The connected documents describe an XML External Entity (XXE) injection vulnerability in the IntelliJ IDEA XML parser, enabling an attacker to exploit via a malicious AndroidManifest.xml to retrieve arbitrary files from a user...

CVE-2017-8316

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml...

PT-2018-8451

Name of the Vulnerable Software and Affected Versions IntelliJ IDEA affected versions not specified Description The IntelliJ IDEA XML parser is susceptible to an XML External Entity attack. An attacker can exploit this issue by implementing malicious code in the AndroidManifest.xml file...

CVE-2017-8316: Improper Restriction of XML External Entity Reference

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml...