DEBIAN-CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

CVE-2015-8978 is a documented XML exponential entity expansion (Billion Laughs) vulnerability in the Perl SOAP-Lite (SOAP::Lite) module, affecting SOAP-Lite 1.14 and earlier. The issue stems from nested XML entity definitions that explode when parsing external SOAP requests, potentially causing m...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978: Undefined Security Weakness

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

PT-2016-4082

Name of the Vulnerable Software and Affected Versions Soap Lite versions 1.14 and earlier Description The issue allows an example attack where an attacker defines multiple XML entities, each consisting of multiple instances of the previous entity. This can lead to excessive computer memory usage...

Ubiquiti UniFi AP AC Lite Database Modification Vulnerability

Ubiquiti UniFi AP AC Lite is a network access point product from Ubiquiti, China. A database modification vulnerability exists in Ubiquiti UniFi AP AC Lite version 5.2.7, which can be exploited by an attacker to directly modify the database...

Messenger Lite - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Messenger Lite published at the 'play' market has multiple vulnerabilities...

InfoWatch DMM Lite - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application InfoWatch DMM Lite published at the 'play' market has multiple vulnerabilities...

Ubiquiti UniFi AP AC Lite 5.2.7 Improper Access Control

Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version: Unify 5.2.7 and possible other versions affected not tested Vulnerable component: Database Report confidence: yes Solution status: Not fixed by...

CVE-2016-5814

CVE-2016-5814 is a classic buffer overflow in Rockwell RSLogix products (Micro Starter Lite/Dveloper; RSLogix 500 Starter/Standard/Professional) triggered by parsing malicious RSS project files. The vulnerability is a CWE-120 flaw that allows code execution when a local user opens a crafted RSS f...

Rockwell Automation RSLogix Micro Starter Lite Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Rockwell Automation RSLogix Micro Starter Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2016-5814: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file...

PT-2016-6694

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSLogix Micro Starter Lite affected versions not specified Rockwell Automation RSLogix Micro Developer affected versions not specified Rockwell Automation RSLogix 500 Starter Edition affected versions not specified Rockwell...

Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting

Overview Splunk Enterprise and Splunk Lite contain a stored cross-site scripting vulnerability CWE-79. Note that this vulnerability is different from JVN74244518. Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#71462075: Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting

Splunk Enterprise and Splunk Lite contain a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser by an attacker who can log-in to the system as an administrator. Solution Update the Software Update to the latest version according t...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...