Prodigysml

The issue is related to the use of regular expressions in the Pydantic library, which can lead to a denial of service when exploited by a remote attacker. This can be achieved via a crafted email string, allowing the attacker to cause a denial of service.

The issue allows XXE (XML External Entity) attacks due to a problem in the binary/BinaryMapIndexReader.java file. This could potentially lead to unauthorized access to data.

The issue allows XXE (XML External Entity) attacks, which is related to the `XmlValidatorManager.java` and `XmlUserManager.java` files in the validator and user directories, respectively. This can potentially lead to unauthorized access to sensitive data.

The issue allows XXE (XML External Entity) attacks due to a problem in the validation process, specifically in the RestXmlSchemaValidator.java file. This could potentially affect a large number of devices worldwide, although the exact number is not specified.

An XXE issue exists due to the platformlambda/core/serializers/SimpleXmlParser.java component. This issue allows for potential exploitation.

Name of the Vulnerable Software and Affected Versions: Quake3e versions prior to 5ed740d Description: The issue affects the component responsible for argument string creation, leading to a buffer overflow. This can result in possible code execution and denial of service. Recommendations: For versions prior to 5ed740d, update to a version that includes the fix for the buffer overflow issue to prevent possible code execution and denial of service.

Name of the Vulnerable Software and Affected Versions: libnmap versions prior to 0.6.3 Description: The issue is related to an XML injection vulnerability, similar to a Billion-Laughs style attack. This vulnerability can lead to a denial of service (DoS) by consuming resources. The component affected is the XML parsing functionality. The attack vector involves a specially crafted XML payload. Recommendations: For versions prior to 0.6.3, update to version 0.6.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the XML parsing component to minimize the risk of exploitation. Avoid using the `NmapParser()` function with untrusted XML inputs until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: uLaunchELF versions prior to commit 170827a Description: The issue is related to a buffer overflow in the loader program, specifically in the loader.c component. This occurs because the loader program overly trusts the arguments provided via the command line. The impact of this issue is possible code execution and denial of service. Recommendations: For versions prior to commit 170827a, update to a version that includes the fix for the buffer overflow issue in the loader program. As a temporary workaround, consider restricting the use of command line arguments to minimize the risk of exploitation.

The issue concerns a XML External Entity (XXE) vulnerability in the CaseMetadata XML Parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via specially crafted CaseMetadata.

The issue concerns a XML External Entity (XXE) vulnerability in the Man in the middle runscape services call. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue concerns a XML External Entity (XXE) vulnerability in the kdbx file parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue is related to a XML External Entity (XXE) vulnerability in the XML Parser for the REST Server. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue concerns a XML External Entity (XXE) vulnerability in the IscheduleClient XML Parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via a Man in the Middle or a malicious server.

The issue concerns a XML External Entity (XXE) vulnerability in the XML parser for plugins. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via a malicious plugins.xml file.

The issue is related to a XML External Entity (XXE) vulnerability in the GSA XML file parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via specially crafted GSA XML files.

The issue in MegaMek can result in disclosure of confidential data, denial of service, SSRF, and remote code execution due to a vulnerability in the Object Stream Connection.

The issue concerns a XML External Entity (XXE) vulnerability that can be exploited via a man-in-the-middle attack during the software update process. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue concerns a user-controlled parameter that can lead to disclosure of confidential data, denial of service, SSRF, and remote code execution.

The issue concerns a XML External Entity (XXE) vulnerability in SMathStudio files, which can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. This can be exploited through specially crafted SMathStudio files.

The issue is related to a XML External Entity (XXE) vulnerability in the Man in the middle on map API call. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.