CWE-611 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-611/ Sun, 26 Feb 2023 06:51:44 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-611 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-611/ 32 32 CVE-2018-9116 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9116/ Sun, 26 Feb 2023 06:51:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9116/ An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service.

The post CVE-2018-9116 appeared first on CVE Vulnerability.

]]> An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service.

The post CVE-2018-9116 appeared first on CVE Vulnerability.

]]> CVE-2018-8940 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8940/ Sun, 26 Feb 2023 06:51:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8940/ ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML file and reference it in the URL of the application, forcing the application to load and parse the malicious XML file, aka an XXE issue.

The post CVE-2018-8940 appeared first on CVE Vulnerability.

]]> ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML file and reference it in the URL of the application, forcing the application to load and parse the malicious XML file, aka an XXE issue.

The post CVE-2018-8940 appeared first on CVE Vulnerability.

]]> CVE-2018-8819 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8819/ Sun, 26 Feb 2023 06:51:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8819/ An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via the “X-Wap-Profile” HTTP header.

The post CVE-2018-8819 appeared first on CVE Vulnerability.

]]> An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via the “X-Wap-Profile” HTTP header.

The post CVE-2018-8819 appeared first on CVE Vulnerability.

]]> CVE-2018-8527 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8527/ Sun, 26 Feb 2023 06:51:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8527/ An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka “SQL Server Management Studio Information Disclosure Vulnerability.” This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8532, CVE-2018-8533.

The post CVE-2018-8527 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka “SQL Server Management Studio Information Disclosure Vulnerability.” This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8532, CVE-2018-8533.

The post CVE-2018-8527 appeared first on CVE Vulnerability.

]]> CVE-2018-8532 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8532/ Sun, 26 Feb 2023 06:51:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8532/ An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka “SQL Server Management Studio Information Disclosure Vulnerability.” This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8533.

The post CVE-2018-8532 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka “SQL Server Management Studio Information Disclosure Vulnerability.” This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8533.

The post CVE-2018-8532 appeared first on CVE Vulnerability.

]]> CVE-2018-8533 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8533/ Sun, 26 Feb 2023 06:51:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8533/ An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka “SQL Server Management Studio Information Disclosure Vulnerability.” This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8532.

The post CVE-2018-8533 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka “SQL Server Management Studio Information Disclosure Vulnerability.” This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8532.

The post CVE-2018-8533 appeared first on CVE Vulnerability.

]]> CVE-2018-8494 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8494/ Sun, 26 Feb 2023 06:51:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8494/ A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka “MS XML Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, […]

The post CVE-2018-8494 appeared first on CVE Vulnerability.

]]> A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka “MS XML Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8494 appeared first on CVE Vulnerability.

]]> CVE-2018-8420 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8420/ Sun, 26 Feb 2023 06:51:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8420/ A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka “MS XML Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8420 appeared first on CVE Vulnerability.

]]> A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka “MS XML Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8420 appeared first on CVE Vulnerability.

]]> CVE-2018-8026 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8026/ Sun, 26 Feb 2023 06:51:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8026/ This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as […]

The post CVE-2018-8026 appeared first on CVE Vulnerability.

]]> This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. The manipulated files can be uploaded as configsets using Solr’s API, allowing to exploit that vulnerability.

The post CVE-2018-8026 appeared first on CVE Vulnerability.

]]> CVE-2018-8027 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8027/ Sun, 26 Feb 2023 06:51:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8027/ Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

The post CVE-2018-8027 appeared first on CVE Vulnerability.

]]> Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

The post CVE-2018-8027 appeared first on CVE Vulnerability.

]]>