CVE-2018-9849 in Pulse Connect Secure
Summary
Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to cause a denial of service (memory consumption and memory errors) via a crafted XML document.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.