CXF: Large invalid content could cause temporary space to fill

It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of dis...

CVE-2014-6724

The Soap Making aka com.tapatalk.soapmakingforumcom application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Soap Making aka com.tapatalk.soapmakingforumcom application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6724

The affected software is the Android app Soap Making (package com.tapatalk.soapmakingforumcom), version 3.7.13. The root cause is lack of certificate validation for TLS/SSL connections, allowing MITM attackers to spoof servers and extract sensitive information via crafted certificates. Public ref...

CVE-2014-6724

The Soap Making aka com.tapatalk.soapmakingforumcom application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6724: Undefined Security Weakness

The Soap Making aka com.tapatalk.soapmakingforumcom application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7402

Name of the Vulnerable Software and Affected Versions The Soap Making application version 3.7.13 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...

Citrix NetScaler SOAP Handler Remote Code Execution

This module exploits a memory corruption vulnerability on the Citrix NetScaler Appliance. The vulnerability exists in the SOAP handler, accessible through the web interface. A malicious SOAP requests can force the handler to connect to a malicious NetScaler config server. This malicious config...

AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)

The vulnerability is due to a failure to safely sanitize remotetask SOAP requests within Util.pm. this vulnerability can be exploit by sending crafted requests to the affected service. Successful exploitation could result in arbitrary command execution with root privileges...

CentOS 5 / 6 : axis (CESA-2014:1193)

Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 5 / 6 : axis (RHSA-2014:1193)

Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CentOS Update for axis CESA-2014:1193 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for axis CESA-2014:1193 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

axis security update

CentOS Errata and Security Advisory CESA-2014:1193 Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score,...

Moderate: Red Hat Security Advisory: devtoolset-2-axis security update

An updated devtoolset-2-axis package that fixes one security issue is now available for Red Hat Developer Toolset 2. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2014-0965

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response...

CVE-2014-0965

CVE-2014-0965 affects IBM WebSphere Application Server (WAS) with information disclosure via crafted SOAP responses. Affected versions are WAS 7.0.x before 7.0.0.33, WAS 8.0.x before 8.0.0.9, and WAS 8.5.x before 8.5.5.3. The root cause is improper handling of SOAP responses, enabling remote atta...

CVE-2014-0965

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response...

CVE-2014-0965: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response...

PT-2014-3981

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 7.0.x through 7.0.0.32 IBM WebSphere Application Server WAS versions 8.0.x through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.2 Description The issue allows remote...