1049 matches found
CVE-2015-3450
Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...
Heap overflow
Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...
CVE-2015-3450
Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...
CVE-2015-3450
CVE-2015-3450 concerns a heap-based buffer overflow in libaxl 0.6.9. A crafted XML document can cause memory corruption, leading to denial of service or arbitrary code execution. The vulnerability is tied to libaxl’s XML handling; no specific vulnerable products or versions beyond 0.6.9 are state...
CVE-2015-3450: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted XML document...
BSA-2017-382
Security Advisory ID : BSA-2017-382 Component : gSOAP Revision : 2.0: Interim Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service...
Xxe
XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...
CVE-2010-2245
XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...
CVE-2010-2245
XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document...
CVE-2017-9765
Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...
DEBIAN-CVE-2017-9765
Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...
Integer overflow
Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...
CVE-2017-9765
Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...
CVE-2017-9765
Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow and application crash via a large XML document, aka Devil'...
CVE-2017-11345
Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RTAC1200GU,...
Denial Of Service (DoS) Through Infinite Loop
Expat is vulnerable to denial of service DoS attacks. A malicious user can cause the parser to enter an infinite loop by passing an XML document with in it...
Sql injection
SQL injection vulnerability in CInfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute arbitrary SQL commands via an XML document containing a crafted ArticleIDs element within a GetArticleHitsArray element...
CVE-2017-9848
SQL injection vulnerability in CInfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute arbitrary SQL commands via an XML document containing a crafted ArticleIDs element within a GetArticleHitsArray element...
Design/Logic Flaw
The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...