55007 matches found
Security Bulletin: XML External Entity Injection (XXE) attack Affects IBM Partner Engagement Manager (CVE-2022-34348)
Summary IBM Sterling Partner Engagement Manager is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Vulnerability Details CVEID:CVE-2022-34348...
[SECURITY] Fedora 40 Update: expat-2.7.0-1.fc40
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
[SECURITY] Fedora 40 Update: libxslt-1.1.43-1.fc40
This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT engine...
CVE-2024-55279
Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...
Important: libxml2
Issue Overview: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML...
CLSA-2025-1742918628 libxml2: Fix of CVE-2025-24928
CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c...
CVE-2025-29932
In JetBrains GoLand before 2025.1 an XXE during debugging was possible...
Medium: batik
Issue Overview: Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some...
CVE-2024-55279
Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...
Important: Red Hat Security Advisory: libxslt security update
An update for libxslt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
microcode_ctl: Improper initialization in UEFI firmware OutOfBandXML module
Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2025-30558 WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render allows Stored XSS. This issue affects ANAC XML Render: from n/a through 1.5.7...
CVE-2025-30558 WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...
CVE-2025-30558
CVE-2025-30558 : A CSRF flaw in the WordPress plugin ANAC XML Render (vendor: EnzoCostantini55) could enable a stored XSS. Affected versions are listed as
WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin ANAC XML Render versions = 1.5.7...
PT-2025-12656 · Uguu · Uguu
Name of the Vulnerable Software and Affected Versions: Uguu versions 1.8.9 and earlier Description: The issue allows Cross Site Scripting XSS via JavaScript in XML files. Recommendations: For versions 1.8.9 and earlier, consider disabling JavaScript execution in XML files as a temporary workaroun...
CVE-2024-55279
CVE-2024-55279 affects Uguu up to version 1.8.9. The issue is a Cross-Site Scripting (XSS) vulnerability via JavaScript in XML files, as described across multiple feeds (NVD, Red Hat, CVE lists). Affected product: Uguu 1.8.9 and earlier; vulnerability stems from handling of JavaScript in XML file...
CVE-2024-55279
Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...
WordPress plugin ANAC XML Render 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...