Fedora: Security Advisory (FEDORA-2025-0ec100da82)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5266

The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service CPU consumption via a large document, a different vulnerability...

CVE-2014-5265

Technical details for CVE-2014-5265 are not publicly provided in the connected documents. The Initial Description mentions an XML entity expansion denial of service in IXR used by WordPress/Drupal. Monitor vendor advisories for updates.

CVE-2014-5265: Undefined Security Weakness

The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted...

PT-2014-6378

Name of the Vulnerable Software and Affected Versions Incutio XML-RPC IXR Library as used in WordPress versions prior to 3.9.2 Incutio XML-RPC IXR Library as used in Drupal versions prior to 6.33 Incutio XML-RPC IXR Library as used in Drupal versions prior to 7.31 Description The issue allows...

CVE-2014-5266: Undefined Security Weakness

The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service CPU consumption via a large document, a different vulnerability...

PT-2014-6379

Name of the Vulnerable Software and Affected Versions Incutio XML-RPC IXR Library as used in WordPress versions prior to 3.9.2 Incutio XML-RPC IXR Library as used in Drupal versions prior to 6.33 Incutio XML-RPC IXR Library as used in Drupal versions prior to 7.31 Description The issue allows...