Unfixed XSS vulnerability at www.gabonphonebook.com

Security researcher xerces, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.gabonphonebook.com, which at the time of submission ranked 534166 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

Unfixed XSS vulnerability at www.alsace-genealogie.com

Security researcher xerces, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.alsace-genealogie.com, which at the time of submission ranked 5749185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It ...

Unfixed XSS vulnerability at www.jv-immobilier.com

Security researcher xerces, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.jv-immobilier.com, which at the time of submission ranked 8839668 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

Unfixed XSS vulnerability at www.ibef.org

Security researcher xerces, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.ibef.org, which at the time of submission ranked 74192 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currently...

Unfixed XSS vulnerability at www.european-discount.com

Security researcher xerces, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.european-discount.com, which at the time of submission ranked 5796453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It ...

Unfixed XSS vulnerability at www.fdimagazine.com

Security researcher xerces, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.fdimagazine.com, which at the time of submission ranked 512203 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

Unfixed XSS vulnerability at www.humour.com

Security researcher xerces, has submitted on 03/07/2008 a cross-site-scripting XSS vulnerability affecting www.humour.com, which at the time of submission ranked 7367 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currently...

CVE-2004-1575

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document...

CVE-2004-1575

CVE-2004-1575 affects Xerces-C++ 2.5.0, where the XML parser can be induced to consume CPU (DoS) by crafted XML attributes. Public references (NVD/NIST, CVE records) classify the impact as a Denial of Service with a base score of 5.0 (Medium). Connected sources corroborate that the DoS arises fro...

CVE-2004-1575: Undefined Security Weakness

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document...

CVE-2004-1575

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document...

CVE-2004-1575

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document. Remediation There is no fixed version for xerces-c. References ...

FreeBSD : xerces-c2 -- Attribute blowup denial-of-service (205)

The following package needs to be updated: xerces-c2 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg763013021d5911d9814e0001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Security advisory - Xerces-C++ 2.5.0: Attribute blowup

Security Advisory Xerces-C++ 2.5.0: Attribute blowup denial-of-service Author: Amit Klein Release Date: October 2nd, 2004 Description: An attacker can craft a malicious XML document, which uses XML attributes in a way that inflicts a denial of service condition on the target machine XML parser. T...

Xerces-C++ DoS

Malcrafted XML document causes 100 CPU ussage for few minutes...

xerces-c2 -- Attribute blowup denial-of-service

Amit Klein reports about Xerces-C++: An attacker can craft a malicious XML document, which uses XML attributes in a way that inflicts a denial of service condition on the target machine XML parser. The result of this attack is that the XML parser consumes all the CPU...