CVE-2012-6531

CVE-2012-6531 affects Zend Framework 1.x: Zend_Dom, Zend_Feed, and Zend_Soap (versions before 1.11.13; 1.12.x before 1.12.0) fail to properly handle SimpleXMLElement, enabling remote XXE injection via a DOCTYPE in XML-RPC requests to read files or initiate TCP connections. This is a separate issu...

CVE-2012-6531

1 ZendDom, 2 ZendFeed, and 3 ZendSoap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC...

CVE-2008-6531

Affected software: Atlassian Jira (

GLSA-200801-06 : Xfce: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-06 Xfce: Multiple vulnerabilities Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the launcherupdatepanelentry function CVE-2007-653...

CVE-2007-6531

CVE-2007-6531: Stack-based buffer overflow in the Panel (xfce4-panel) component of Xfce before 4.4.2 may allow remote code execution via Launcher tooltips. A second over-read exists in xfce_mkdirhier but is not necessarily exploitable. Affected: xfce4-panel; libxfcegui4 linked via the Xfce suite....

CVE-2006-6531

Cross-site scripting XSS vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML, and possibly obtain administrative access, via node titles...

CVE-2006-6531

CVE-2006-6531 affects the Drupal Help Tip module prior to 4.7.x-1.0, where an XSS vulnerability exists that allows remote attackers to inject arbitrary script/HTML via node titles. Root cause is an input/output handling flaw in the module that fails to sanitize title content. Impact is partial co...