2 matches found
UBUNTU-CVE-2016-10134
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php...
PT-2011-3350 · Jabberd2 · Jabberd2
Name of the Vulnerable Software and Affected Versions: jabberd2 versions prior to 2.2.14 Description: The issue allows remote attackers to cause a denial of service due to memory and CPU consumption. This is achieved through a crafted XML document containing a large number of nested entity...