709 matches found
CVE-2018-5433 XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator
The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion XXE attacks to disclose host machine...
Xxe
Multiple variants of XML External Entity XXE attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior...
CVE-2018-10613
Multiple variants of XML External Entity XXE attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior...
CVE-2018-10613
Multiple variants of XML External Entity XXE attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior...
CVE-2014-3990
The CVE-2014-3990 entries describe an OpenCart
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
openSUSE Security Update : python3-openpyxl (openSUSE-2018-202)
This update for python3-openpyxl fixes one security issue : - CVE-2017-5992: Prevent resolving external entities by default, which allowed remote attackers to conduct XXE attacks via a crafted .xlsx document bsc1025592. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
openSUSE Security Update : python-openpyxl (openSUSE-2018-44)
This update for python-openpyxl fixes one issue. This security issue was fixed : - CVE-2017-5992: Prevent resolving external entities by default, which allowed remote attackers to conduct XXE attacks via a crafted .xlsx document bsc1025592. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2017-1000477
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks...
Design/Logic Flaw
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks...
CVE-2017-1000477
CVE-2017-1000477 is linked to the XMLBundle project, affecting version 0.1.7. The connected sources uniformly describe an XML External Entity (XXE) vulnerability that can result in a denial of service . The materials do not provide concrete remediation details, patch versions, or explicit exploit...
CVE-2017-1000477
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks...
Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities
Use-after-free error could lead to crash CVE-2016-4658. Use-after-free vulnerability in libxml2 through 2.9.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function CVE-2016-5131. libxml2 2.9.4 and earli...
Code injection
Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code...
Remote code execution
Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...
CVE-2017-1000498
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution...
CVE-2017-1000498
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution...
CVE-2017-1000497
Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution...