4003 matches found
CVE-2021-21702
A NULL pointer dereference issue is in the SOAP extension of PHP. More specifically, the flaw occurs in the SoapClient when parsing a WSDL document due to improper checking of a child node name. A malicious or compromised server replies with a crafted WSDL document, leading to a denial of service...
CVE-2020-27873
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...
CVE-2020-27873
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...
Design/Logic Flaw
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...
CVE-2020-27873
NETGEAR R7450 router (firmware 1.2.0.62_1.0.1) is affected by CVE-2020-27873. The flaw is in the SOAP API endpoint on TCP/80 due to improper access control, enabling network-adjacent attackers to disclose stored credentials and potentially compromise the device. The issue is associated with ZDI-2...
CVE-2020-27873
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...
CVE-2021-21702
In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...
NETGEAR R7450 SOAP API RecoverAdminPassword Improper Access Control Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 80 by default...
Fedora 32 : sympa (2021-a5570c5281)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a5570c5281 advisory. - Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as...
Fedora 33 : sympa (2021-11cb6626e2)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-11cb6626e2 advisory. - Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as...
Genivia gSOAP WS-Addressing plugin functionality remote code execution vulnerability
Genivia gSOAP is a C/C++ software development kit with automatic coding capabilities. A security vulnerability exists in the Genivia gSOAP WS-Addressing plugin functionality, which can be exploited by an attacker to achieve remote code execution by sending a specially crafted SOAP request...
Genivia gSOAP Denial of Service Vulnerability
Genivia gSOAP is a C/C++ software development toolkit with automatic coding capabilities from Genivia, USA. A denial of service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. An attacker can exploit this vulnerability by sending a specially crafted SOAP...
Genivia gSOAP 输入验证错误漏洞
Genivia gSOAP is a C/C++ software development kit with automatic coding capabilities. A security vulnerability exists in the Genivia gSOAP WS-Addressing plugin functionality, which can be exploited by an attacker to achieve remote code execution by sending a specially crafted SOAP request...
Genivia gSOAP WS-Addressing plugin denial-of-service vulnerability
Summary A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product UR...
Genivia gSOAP 代码问题漏洞
Genivia gSOAP is a C/C++ software development toolkit with automatic coding capabilities from Genivia, USA. A denial of service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. An attacker can exploit this vulnerability by sending a specially crafted SOAP...
Genivia gSOAP WS-Addressing plugin code execution vulnerability
Summary A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product...
Genivia gSOAP WS-Security plugin denial-of-service vulnerability
Summary A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product URLs...
CVE-2020-28413
In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...