Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing (XMLDsig) specification without protection against an SSRF payload in a KeyInfo element. NOTE: the supplier disputes this CVE Record on the grounds that they are implementing the specification “correctly” and are not “at fault.”
https://santuario.apache.org/download.html
https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2024-21893.md
![CVE-2024-34580 : APACHE XML SECURITY FOR C++ UP TO 2.0.4 XML SIGNATURE SERVER-SIDE REQUEST FORGERY ⚔ [Disputed]](https://prophaze.com/wp-content/uploads/2024/06/CVE-2024-34580.jpg)
Description A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an
Description ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. References https://mind-bytes.de/sql-injection-in-foss-online-cve-2024-34334/
Description A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636