CVE-2015-7115

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7116...

CVE-2015-7116

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7115...

PT-2016-3741

Name of the Vulnerable Software and Affected Versions libxml2 in Apple iOS versions prior to 9.2 libxml2 in Apple OS X versions prior to 10.11.2 libxml2 in Apple tvOS versions prior to 9.1 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service d...

PT-2016-3742

Name of the Vulnerable Software and Affected Versions libxml2 in Apple iOS versions prior to 9.2 libxml2 in Apple OS X versions prior to 10.11.2 libxml2 in Apple tvOS versions prior to 9.1 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service d...

CVE-2015-7115: Improper Restriction of Operations within the Bounds of a Memory Buffer

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7116...

CVE-2015-7116: Improper Restriction of Operations within the Bounds of a Memory Buffer

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7115...

Design/Logic Flaw

IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does not properly detect recursion during XML entity expansion, which allows remote attackers to cause a denial of service CPU consumption and application crash via a crafted XML document containing a large...

PT-2016-3662

Name of the Vulnerable Software and Affected Versions IBM Connections versions 3.x through 3.0.1.1 CR2 IBM Connections versions 4.0 through 4.0 CR3 IBM Connections versions 4.5 through 4.5 CR4 IBM Connections versions 5.0 through 5.0 CR2 Description The issue allows remote attackers to cause a...

CVE-2015-7912

The Ice Faces servlet in agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document...

Code injection

The Ice Faces servlet in agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document...

CVE-2015-7912

The Ice Faces servlet in agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document...

CVE-2015-7912

The CVE-2015-7912 entry describes a remote code execution vulnerability in Tibbo AggreGate Platform prior to version 5.30.06. The issue resides in the Ice Faces servlet within ag_server_service.exe of the AggreGate Server Service, allowing an unauthenticated remote attacker to upload and execute ...

CVE-2015-7912: Undefined Security Weakness

The Ice Faces servlet in agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document...

Adobe ColdFusion Multiple Vulnerabilities (APSB15-29) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist due to a failure to validate input before returning it to the user. A remote attacker can exploit these to inject arbitrary script...

Server side request forgery (ssrf)

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

CVE-2015-5255

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

CVE-2015-5255

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

CVE-2015-5255

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

CVE-2015-5255: Improper Input Validation

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to...

PT-2015-2739

Name of the Vulnerable Software and Affected Versions Adobe BlazeDS versions prior to 3.0.0.354175 Adobe BlazeDS versions 3.1.x prior to 3.1.0.354180 Adobe BlazeDS versions 4.5.x prior to 4.5.1.354177 Adobe BlazeDS versions 4.6.2.x prior to 4.6.2.354178 Adobe BlazeDS versions 4.7.x prior to...