Code injection

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE attack...

CVE-2013-4549

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE attack...

CVE-2013-4549

CVE-2013-4549 affects QXmlSimpleReader in Qt prior to 5.2, where an XML Entity Expansion (XEE) attack can cause memory consumption leading to a denial of service. The initial record lists this CVE with a base CVSSv2 score of 5.0 (MEDIUM) and vectors AV:N/AC:L/Au:N/C:N/I:N/A:P, indicating network ...

CVE-2013-4549

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE attack...

CVE-2013-4549

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE attack...

CVE-2013-4549: Improper Input Validation

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE attack...

Ubuntu Update for qt4-x11 USN-2057-1

Check for the Version of qt4-x11 OpenVAS Vulnerability Test $Id: gbubuntuUSN20571.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for qt4-x11 USN-2057-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

DEBIAN-CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

Design/Logic Flaw

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

CVE-2013-1812

CVE-2013-1812 affects the ruby-openid gem for Ruby, with the vendor reference stating: “before 2.2.2 … allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.” The linked advisories confirm the issue ...

CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

PT-2013-3403

Name of the Vulnerable Software and Affected Versions ruby-openid versions prior to 2.2.2 Description The issue allows remote OpenID providers to cause a denial of service, specifically CPU consumption, through two methods: 1 a large XRDS document or 2 an XML Entity Expansion XEE attack. XEE atta...

CVE-2013-1812: Undefined Security Weakness

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

PT-2013-1265

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.2 Qtcore versions prior to 4.8.5-r1 Description The issue allows context-dependent attackers to cause a denial of service, potentially leading to memory consumption via an XML Entity Expansion XEE attack. Exploitation of...

CVE-2013-4549

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE attack...

[USN-2005-1] Cinder vulnerabilities

========================================================================== Ubuntu Security Notice USN-2005-1 October 23, 2013 cinder vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS / 12.10 / 13.04 : nova vulnerabilities (USN-2000-1)

It was discovered that Nova did not properly enforce the ispublic property when determining flavor access. An authenticated attacker could exploit this to obtain sensitive information in private flavors. This issue only affected Ubuntu 12.10 and 13.10. CVE-2013-2256, CVE-2013-4278 Grant Murphy...