Prodigysml

O problema está relacionado ao uso de expressões regulares na biblioteca Pydantic, o que pode levar a uma negação de serviço quando explorado por um invasor remoto. Isso pode ser feito por meio de uma sequência de e-mail maliciosa, permitindo que o invasor cause uma negação de serviço.

A vulnerabilidade permite ataques XXE (Entidade Externa XML) devido a um problema no arquivo binary/BinaryMapIndexReader.java. Isso pode potencialmente levar ao acesso não autorizado aos dados.

A vulnerabilidade permite ataques XXE (XML External Entity), relacionados aos arquivos `XmlValidatorManager.java` e `XmlUserManager.java` nos diretórios validator e user, respectivamente. Isso pode potencialmente levar ao acesso não autorizado a dados confidenciais.

A vulnerabilidade permite ataques XXE (Entidade Externa XML) devido a um problema no processo de validação, especificamente no arquivo RestXmlSchemaValidator.java. Isso pode afetar potencialmente um grande número de dispositivos em todo o mundo, embora o número exato não tenha sido especificado.

Existe uma vulnerabilidade de tipo XXE devido ao componente platformlambda/core/serializers/SimpleXmlParser.java. Essa vulnerabilidade permite uma possível exploração.

Name of the Vulnerable Software and Affected Versions: Quake3e versions prior to 5ed740d Description: The issue affects the component responsible for argument string creation, leading to a buffer overflow. This can result in possible code execution and denial of service. Recommendations: For versions prior to 5ed740d, update to a version that includes the fix for the buffer overflow issue to prevent possible code execution and denial of service.

Name of the Vulnerable Software and Affected Versions: libnmap versions prior to 0.6.3 Description: The issue is related to an XML injection vulnerability, similar to a Billion-Laughs style attack. This vulnerability can lead to a denial of service (DoS) by consuming resources. The component affected is the XML parsing functionality. The attack vector involves a specially crafted XML payload. Recommendations: For versions prior to 0.6.3, update to version 0.6.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the XML parsing component to minimize the risk of exploitation. Avoid using the `NmapParser()` function with untrusted XML inputs until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: uLaunchELF versions prior to commit 170827a Description: The issue is related to a buffer overflow in the loader program, specifically in the loader.c component. This occurs because the loader program overly trusts the arguments provided via the command line. The impact of this issue is possible code execution and denial of service. Recommendations: For versions prior to commit 170827a, update to a version that includes the fix for the buffer overflow issue in the loader program. As a temporary workaround, consider restricting the use of command line arguments to minimize the risk of exploitation.

The issue concerns a XML External Entity (XXE) vulnerability in the CaseMetadata XML Parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via specially crafted CaseMetadata.

The issue concerns a XML External Entity (XXE) vulnerability in the Man in the middle runscape services call. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue concerns a XML External Entity (XXE) vulnerability in the kdbx file parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue is related to a XML External Entity (XXE) vulnerability in the XML Parser for the REST Server. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue concerns a XML External Entity (XXE) vulnerability in the IscheduleClient XML Parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via a Man in the Middle or a malicious server.

The issue concerns a XML External Entity (XXE) vulnerability in the XML parser for plugins. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via a malicious plugins.xml file.

The issue is related to a XML External Entity (XXE) vulnerability in the GSA XML file parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via specially crafted GSA XML files.

The issue in MegaMek can result in disclosure of confidential data, denial of service, SSRF, and remote code execution due to a vulnerability in the Object Stream Connection.

The issue concerns a XML External Entity (XXE) vulnerability that can be exploited via a man-in-the-middle attack during the software update process. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

The issue concerns a user-controlled parameter that can lead to disclosure of confidential data, denial of service, SSRF, and remote code execution.

The issue concerns a XML External Entity (XXE) vulnerability in SMathStudio files, which can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. This can be exploited through specially crafted SMathStudio files.

The issue is related to a XML External Entity (XXE) vulnerability in the Man in the middle on map API call. This can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.