3982 matches found
The vulnerability of the PHP interpreter allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the functions ext/soap/phpencoding.c, ext/soap/phphttp.c, and ext/soap/soap.c in the PHP interpreter is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or execute arbitrary code usin...
Magento < 2.0.6 - Unauthenticated Remote Code Execution
参考来源：http://netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution/ The vulnerability CVE-2016-4010 allows an attacker to execute PHP code at the vulnerable Magento server unauthenticated. This vulnerability actually consists of many small vulnerabilities Magento is an extremely...
Type confusion
PHP before 5.6.7 might allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in 1 ext/soap/phpencoding.c, 2 ext/soap/phphttp.c, and 3 ext/soap/soap.c, a different issue than...
CVE-2015-8835
The vulnerability CVE-2015-8835 affects PHP’s SoapClient path: the make_http_soap_request function in ext/soap/php_http.c fails to retrieve keys correctly in PHP versions 5.4.x up to 5.4.43, 5.5.x up to 5.5.27, and 5.6.x up to 5.6.11. This can enable a remote attacker to cause a denial of service...
CVE-2016-3185
CVE-2016-3185 affects PHP’s SOAP extension. The vulnerability exists in make_http_soap_request (ext/soap/php_http.c) and relates to crafted serialized _cookies data passed via SoapClient::__call (ext/soap/soap.c). A remote attacker could exfiltrate memory contents or cause a denial of service thr...
Ubuntu: Security Advisory (USN-2952-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Application Testing Suite Java Object Deserialization RCE (April 2016 CPU)
The version of Oracle Application Testing Suite installed on the remote host is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by...
Ubuntu 15.10 : php5 regression (USN-2952-2)
USN-2952-1 fixed vulnerabilities in PHP. One of the backported patches caused a regression in the PHP Soap client. This update fixes the problem. We apologize for the inconvenience. It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A...
USN-2952-2: PHP regression
USN-2952-1 fixed vulnerabilities in PHP. One of the backported patches caused a regression in the PHP Soap client. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the PHP Zip extension incorrectly handled directories when...
PHP Denial of Service Vulnerability (CNVD-2016-02638)
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A denial of service vulnerability exists in PHP's Soap client. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...
Netgear Unauthenticated SOAP Password Extractor
No description provided by source...
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2952-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2952-1 advisory. It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A remote attacker could possibly use this...
USN-2952-1 php5 vulnerabilities
It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A remote attacker could possibly use this issue to create arbitrary directories. CVE-2014-9767 It was discovered that the PHP Soap client incorrectly validated data types. A remote...
CVE-2014-9759
Incomplete blacklist vulnerability in the configisprivate function in configapi.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request...
Input validation
Incomplete blacklist vulnerability in the configisprivate function in configapi.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request...
CVE-2014-9759
Incomplete blacklist vulnerability in the configisprivate function in configapi.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request...
CVE-2014-9759
Summary: CVE-2014-9759 affects MantisBT 1.3.x prior to 1.3.0. The flaw is in the function exposed by config_api.php (config_is_private) where an incomplete blacklist enables a remote attacker to obtain sensitive master salt configuration information via the SOAP API. What’s affected: MantisBT 1.3...
CVE-2016-2164
The 1 FileService.importFileByInternalUserId and 2 FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file...
Design/Logic Flaw
The 1 FileService.importFileByInternalUserId and 2 FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file...
CVE-2015-6541
Multiple cross-site request forgery CSRF vulnerabilities in the Mail interface in Zimbra Collaboration Server ZCS before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest...