Lucene search
+L

171 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:58 a.m.9 views

SUSE CVE-2020-13577

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS8.4AI score0.03048EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/13 1:09 a.m.60 views

GHSA-XF9F-32GH-H2W4 Improper Authentication in Apache CXF

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

5.8CVSS9.2AI score0.08157EPSS
SaveExploits0References38
Github Security Blog
Github Security Blog
added 2022/05/13 1:09 a.m.44 views

Improper Authentication in Apache CXF

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

5.8CVSS5.9AI score0.08157EPSS
SaveExploits0References38Affected Software1
OSV
OSV
added 2022/05/05 2:48 a.m.26 views

GHSA-P5C5-6564-VVR8 Improper Authentication in Apache CXF

Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element...

5CVSS7.2AI score0.04687EPSS
SaveExploits0References22
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.9 views

The vulnerability of the WS-Security plugin in the gSOAP software development environment allows a attacker to cause a service failure.

The vulnerability of the WS-Security plugin in the gSOAP software development environment is related to errors in pointer assignment during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...

7.5CVSS7.2AI score0.03048EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2021/06/16 8:22 p.m.36 views

MGASA-2021-0263 Updated gsoap packages fix security vulnerabilities

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability CVE-2020-13574. A denial-of-service vulnerability exists in...

9.8CVSS7.9AI score0.0586EPSS
SaveExploits5References8
Mageia
Mageia
added 2021/06/16 8:22 p.m.174 views

Updated gsoap packages fix security vulnerabilities

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability CVE-2020-13574. A denial-of-service vulnerability exists in...

9.8CVSS1.4AI score0.0586EPSS
SaveExploits5References7
Tenable Nessus
Tenable Nessus
added 2021/03/17 12:00 a.m.46 views

Fedora 33 : gsoap (2021-faea36a9c3)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-faea36a9c3 advisory. - A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can le...

9.8CVSS8.5AI score0.0586EPSS
SaveExploits5References6
Veracode
Veracode
added 2021/03/09 9:46 p.m.35 views

Denial Of Service (DoS)

gsoap is vulnerable to denial-of-service. The WS-Security plugin functionality allows an attacker to crash the application using a malicious SOAP request...

7.5CVSS3.4AI score0.03048EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
added 2021/03/09 9:46 p.m.38 views

Denial Of Service (DoS)

gsoap is vulnerable to denial of service DoS. The vulnerability exists in the WS-Security plugin functionality when processing a SOAP request...

7.5CVSS2.8AI score0.03023EPSS
SaveExploits1References7Affected Software1
CNVD
CNVD
added 2021/02/20 12:00 a.m.48 views

Genivia gSOAP Null Pointer Dereference Vulnerability

gSOAP is a C/C++ library for developing XML-based Web services . A null pointer dereference vulnerability exists in the WS-Security plug-in feature of Genivia gSOAP 2.8.107. An attacker could exploit this vulnerability by sending a specially crafted SOAP request to cause a denial of service...

7.5CVSS6.5AI score0.03048EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/10 8:15 p.m.28 views

CVE-2020-13578

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS0.03023EPSS
SaveExploits1References4
OSV
OSV
added 2021/02/10 8:15 p.m.3 views

DEBIAN-CVE-2020-13578

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS8.1AI score0.03023EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 8:15 p.m.2 views

DEBIAN-CVE-2020-13577

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS6.9AI score0.03048EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/10 8:15 p.m.33 views

CVE-2020-13574

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS0.03048EPSS
SaveExploits1References4
NVD
NVD
added 2021/02/10 8:15 p.m.32 views

CVE-2020-13577

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS0.03048EPSS
SaveExploits1References4
Prion
Prion
added 2021/02/10 8:15 p.m.39 views

Cross site request forgery (csrf)

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

5CVSS7.3AI score0.03048EPSS
SaveExploits1References4Affected Software2
Prion
Prion
added 2021/02/10 8:15 p.m.43 views

Cross site request forgery (csrf)

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

5CVSS7.3AI score0.03048EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2021/02/10 8:15 p.m.42 views

CVE-2020-13578

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS7.1AI score0.03023EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/10 8:15 p.m.9 views

UBUNTU-CVE-2020-13574

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS7.2AI score0.03048EPSS
SaveExploits1References3
Rows per page
Query Builder