CVE-2014-0110

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service /tmp disk consumption via a large invalid SOAP message...

CVE-2014-0110

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service /tmp disk consumption via a large invalid SOAP message...

CVE-2014-0109: Undefined Security Weakness

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service memory consumption via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error...

PT-2014-3481

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 2.6.14 Apache CXF versions 2.7.x prior to 2.7.11 Description The issue allows remote attackers to cause a denial of service, specifically /tmp disk consumption, by sending a large invalid SOAP message...

CVE-2014-0110: Undefined Security Weakness

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service /tmp disk consumption via a large invalid SOAP message...

PT-2014-3480

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 2.6.14 Apache CXF versions 2.7.x prior to 2.7.11 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a large request with the Content-Type set to...

SOAPpy <= 0.12.5 XXE Vulnerability - Active Check

SOAPpy is prone to an XML external entity XXE vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlienVault OSSIM av-centerd Command Injection

This module exploits a code execution flaw in AlienVault 4.6.1 and prior. The vulnerability exists in the av-centerd SOAP web service, where the updatesysteminfodebianpackage method uses perl backticks in an insecure way, allowing command injection. This module has been tested successfully on...

Advantech WebAccess DBVisitor.dll特制SOAP请求SQL注入漏洞

CVE ID:CVE-2014-0763 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess存在一个SQL注入攻击，漏洞是由于SOAP接口公开DBVisitor.dll，允许攻击者利用漏洞提交特制的SOAP请求，注入或操作SQL查询，可获取敏感敏感信息或操作数据库。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用： http://webaccess.advantech.com/...

[SECURITY] Fedora 19 Update: php-ZendFramework2-2.2.6-1.fc19

Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...

Sql injection

Multiple SQL injection vulnerabilities in DBVisitor.dll in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary SQL commands via SOAP requests to unspecified functions...

CVE-2014-0763 Advantech WebAccess SQL Injection

An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and access to records in the table of the...

CVE-2014-0763

Summary of CVE-2014-0763 (Advantech WebAccess) : The vulnerability affects Advantech WebAccess (7.1 and earlier) in the DBVisitor.dll component exposed via SOAP interfaces, where SOAP injection enables SQL injection through the ChartThemeConfig/service vectors. This may allow an attacker to perfo...

CVE-2014-0763: Improper Neutralization of Special Elements used in an SQL Command

An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and access to records in the table of the...

PT-2014-3825

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 7.2 Description The issue concerns SQL injection vulnerabilities in the DBVisitor.dll component of Advantech WebAccess. These vulnerabilities allow remote attackers to execute arbitrary SQL commands via SO...

Advantech WebAccess DBVisitor.dll SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DBVisitor.dll component. Multiple SOAP requests implemented by the component a...

Hewlett-Packard SiteScope SOAP Arbitrary File Download and Denial of Service Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. The issue lies in failure to require...

CVE-2013-3213

CVE-2013-3213 affects vtiger CRM 5.0.0–5.4.0, exposing multiple SQL injection vectors via SOAP services. Vulnerable code paths include get_picklists in /soap/customerportal.php, get_tickets_list in /soap/customerportal.php, and SearchContactsByEmail in /soap/thunderbirdplugin.php and /soap/vtiger...

CVE-2013-3213: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 picklistname parameter in the getpicklists method to soap/customerportal.php, 2 where parameter in the getticketslist method to soap/customerportal.php, or 3...

PT-2014-2662

Name of the Vulnerable Software and Affected Versions vTiger CRM versions 5.0.0 through 5.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands via several parameters, including the picklist name parameter in the "get picklists" method to "soap/customerportal.php", t...