48 matches found
CVE-2013-5657
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request...
CVE-2013-5657
CVE-2013-5657 affects AultWare pwStore 2010.8.30.0, which is vulnerable to a Denial of Service via an empty HTTP request. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with CVSS v2/3 impact indicating Availability impact (PARTIAL–HIGH) and network access with no authenti...
CVE-2018-5657
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitleicon parameter...
CVE-2018-5657
The CVE-2018-5657 entry applies to the WordPress plugin “responsive-coming-soon-page” v1.1.18. Root cause: cross-site scripting via the wp-admin/admin.php counter_title_icon parameter. Impact stated as XSS (execution of arbitrary script/HTML) in multiple sources. Exploitation details are not prov...
XML External Entity (XXE) Attacks
Zendframework and several Zendservices are vulnerable to XML External Entity XXE attacks. The libxmldisableentityloader is not correctly shared between threads then PHP-FPM is used, allowing attackers to conduct XXE attacks. This is as a result of an incomplete fix for CVE-2012-5657...
CVE-2017-5657
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery CSRF attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active...
CVE-2017-5657
Summary: Multiple connected sources confirm that Apache Archiva REST endpoints are vulnerable to CSRF. The underlying issue is lack of CSRF protections, allowing a malicious site loaded in the same browser as Archiva to trigger actions with the current user’s privileges (potentially admin). The r...
CVE-2015-5657
CVE-2015-5657 entry is rejected and does not represent an active vulnerability.
Xxe
Zend Framework 1 ZF1 before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendServiceAudioScrobbler, ZendServiceNirvanix, ZendServiceSlideShare, ZendServiceTechnorati, and ZendServiceWindowsAzure before 2.0.2, ZendServiceAmazon before 2.0.3, and ZendServiceAp...
Xxe
Zend Framework 1 ZF1 before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendServiceAudioScrobbler, ZendServiceNirvanix, ZendServiceSlideShare, ZendServiceTechnorati, and ZendServiceWindowsAzure before 2.0.2, ZendServiceAmazon before 2.0.3, and ZendServiceAp...
CVE-2014-5657
The CVE-2014-5657 entry describes the CA Lottery Results (com.matcho0.calotto) Android app v2.1 as failing to verify X.509 certificates from SSL servers. This permits man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. Connected sour...
CVE-2012-5657
The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...
CVE-2012-5657
CVE-2012-5657 affects Zend Framework 1.x Zend_Feed_Rss and Zend_Feed_Atom in Zend Framework 1.11.x (<1.11.15) and 1.12.x (
CVE-2013-5657
creationtimestamp| type| source ---|---|--- 2013-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38747...
Fedora Update for php-ZendFramework FEDORA-2013-0061
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 16 : php-ZendFramework-1.12.1-1.fc16 (2013-0061)
Fixes for security relevant issue CVE-2012-5657 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 18 : php-ZendFramework-1.12.1-1.fc18 (2013-0063)
Fixes for security relevant issue CVE-2012-5657 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for php-ZendFramework FEDORA-2013-0057
Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2013-0057 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora 17 : php-ZendFramework-1.12.1-1.fc17 (2013-0057)
Fixes for security relevant issue CVE-2012-5657 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...