CVE-2014-5266

The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service CPU consumption via a large document, a different vulnerability...

PT-2014-6378

Name of the Vulnerable Software and Affected Versions Incutio XML-RPC IXR Library as used in WordPress versions prior to 3.9.2 Incutio XML-RPC IXR Library as used in Drupal versions prior to 6.33 Incutio XML-RPC IXR Library as used in Drupal versions prior to 7.31 Description The issue allows...

CVE-2014-5266: Undefined Security Weakness

The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service CPU consumption via a large document, a different vulnerability...

CVE-2014-5265: Undefined Security Weakness

The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted...

PT-2014-6379

Name of the Vulnerable Software and Affected Versions Incutio XML-RPC IXR Library as used in WordPress versions prior to 3.9.2 Incutio XML-RPC IXR Library as used in Drupal versions prior to 6.33 Incutio XML-RPC IXR Library as used in Drupal versions prior to 7.31 Description The issue allows...