CVE-2017-14743

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/deviceservice, as demonstrated by reading the admin password...

CVE-2017-14743

The CVE-2017-14743 vulnerability affects Faleemi FSC-880 devices with firmware 00.01.01.0048P2. According to multiple sources, the issue allows unauthenticated SQL injection via the Username element in an XML document sent to /onvif/device_service, demonstrated by reading the administrator passwo...

PT-2017-13662

Name of the Vulnerable Software and Affected Versions Faleemi FSC-880 version 00.01.01.0048P2 Description The issue allows unauthenticated SQL injection via the Username element in an XML document to the "/onvif/device service" API endpoint, which can be exploited to read the admin password...

CVE-2017-14743: Improper Neutralization of Special Elements used in an SQL Command

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/deviceservice, as demonstrated by reading the admin password...

Heap overflow

Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...

CVE-2015-3450

Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...

CVE-2015-3450

Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...

CVE-2015-3450

CVE-2015-3450 concerns a heap-based buffer overflow in libaxl 0.6.9. A crafted XML document can cause memory corruption, leading to denial of service or arbitrary code execution. The vulnerability is tied to libaxl’s XML handling; no specific vulnerable products or versions beyond 0.6.9 are state...

PT-2017-6676

Name of the Vulnerable Software and Affected Versions libaxl version 0.6.9 Description A heap-based buffer overflow issue allows attackers to cause a denial of service, resulting in memory corruption, or execute arbitrary code via a crafted XML document. Recommendations For libaxl version 0.6.9, ...

CVE-2015-3450: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...

BSA-2017-382

Security Advisory ID : BSA-2017-382 Component : gSOAP Revision : 2.0: Interim Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service...

Xxe

XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...

CVE-2010-2245

XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...

CVE-2010-2245

XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...

PT-2017-4815

Name of the Vulnerable Software and Affected Versions: Apache Wink versions 1.1.1 and earlier Description: The issue allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document. Recommendations: For Apache Wink versions 1.1.1 and earlier, consider...

Integer overflow

Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...

CVE-2017-9765

Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...

DEBIAN-CVE-2017-9765

Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...

CVE-2017-9765

Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...

CVE-2017-9765

Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...