shibboleth-sp -- vulnerable to forged user attribute data

Shibboleth consortium reports: Shibboleth SP software vulnerable to forged user attribute data The Service Provider software relies on a generic XML parser to process SAML responses and there are limitations in older versions of the parser that make it impossible to fully disable Document Type...

c3-rcon.net XSS vulnerability

Open Bug Bounty ID: OBB-388976 Description| Value ---|--- Affected Website:| c3-rcon.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

c3.hu XSS vulnerability

Vulnerable URL: http://www.c3.hu/collection/indexen.php?id=43" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 369670 VIP website status:| No Check c3.hu SSL connection:| Grade: F...

Cross-Site Scripting

Overview Affected versions of c3 are vulnerable to cross-site scripting via improper sanitization of HTML in rendered tooltips. Recommendation Update to 0.4.11 or later. References - Issue 1536 - GitHub Advisory...

xercesi-c3 -- multiple vulnerabilities

Apache reports: The Xerces-C XML parser fails to successfully parse a DTD that is deeply nested, and this causes a stack overflow, which makes a denial of service attack against many applications possible by an unauthenticated attacker. Also, CVE-2016-2099: Use-after-free vulnerability in...

FreeBSD : xerces-c3 -- Parser Crashes on Malformed Input (a7f2e9c6-de20-11e5-8458-6cc21735f730)

The Apache Software Foundation reports : The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bug...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1810

EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service daemon restart by sending data to TCP port 1 5050 or 2 24004...

CVE-2012-1812

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

CVE-2012-1811

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

Code injection

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

Code injection

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

Code injection

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1812

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

CVE-2012-1810

The CVE-2012-1810 vulnerability affects C3-ilex EOScada prior to version 11.0.19.2, where EOSCoreScada.exe can be triggered remotely via TCP ports 5050/TCP or 24004/TCP. The issue, described as improper access control, allows a remote attacker to cause a denial-of-service by sending data, leading...

CVE-2012-1811

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1812

CVE-2012-1812 affects C3-ilex EOScada; vulnerability in the EOSfailoverservice.exe component exposes cleartext data via TCP port 12000. The issue is described as data leakage through an improper access control condition, affecting EOScada versions prior to 11.0.19.2. Impact includes potential dat...

CVE-2012-1813

CVE-2012-1813 concerns eosfailoverservice.exe in C3-ilex EOScada prior to 11.0.19.2. The vulnerability allows a remote attacker to cause a denial-of-service by sending a large amount of data to TCP port 12000, via the EOS failover service. The CVE entry specifies a DoS impact with a network attac...

CVE-2012-1811

CVE-2012-1811 affects C3-ilex EOScada, specifically the EOSDataServer.exe component. Before version 11.0.19.2, this service on TCP port 24006 is vulnerable to a Resource Management Error: sending a large amount of random data can cause a denial-of-service, resulting in the application crashing an...