CWE-611

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gai

An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldSe

Microsoft SharePoint Information Disclosure Vulnerability

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gai

A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects un

An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by

In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails

In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack

Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a rem

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a secu

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, w

Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 a

Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creat

Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development

When SEW-EURODRIVE MOVITOOLS MotionStudio processes XML information unrestricted file access can occur.

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Inje

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high pr

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when process

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when process

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the und

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10

Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which lead

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute Jav

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Serv

OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manual

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: XML input

Laravel v11.x was discovered to contain an XML External Entity (XXE) vulnerability.

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high

The CodeQL CLI repo holds binaries for the CodeQL command line interface (CLI). Prior to version 2.16.3, an XML parser u

When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentB

XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO

A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across mu

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI in

SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for

Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when pro

IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remot

Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents

Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XX

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (

Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).

An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a cr

In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused dep

Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity