2393 matches found
Symfony 2 Unauthenticated Information Disclosure
Exploit for php platform in category web applications Vendor Notification Date. 24-Feb-2012 Product. Symfony2 Platform. PHP Affected versions. 2.0.x - 2.0.10 Severity Rating. Medium Impact. Exposure of sensitive information Attack Vector. Remote without authentication Solution Status. Vendor patc...
Symfony 2 Unauthenticated Information Disclosure
Sense of Security - Security Advisory - SOS-12-002 Release Date. 05-Mar-2012 Last Update. - Vendor Notification Date. 24-Feb-2012 Product. Symfony2 Platform. PHP Affected versions. 2.0.x - 2.0.10 Severity Rating. Medium Impact. Exposure of sensitive information Attack Vector. Remote without...
PhpMyadmin arbitrary file reading vulnerability-vulnerability warning-the black bar safety net
PhpMyadmin to achieve the wrong using the simplexmlloadstring function for parsing xml, but this function is in default and did not deal with external entities of safety, causing the user can by means of xml files to read and access the application has permission to access system and network...
Cisco Jabber Extensible Communications Platform / Cisco Unified Presence
Resources exhaustion on XML parsing...
Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow
Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...
Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow
/ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link: http://aika.googlecode.com/files/aika-v02.zip Version: 0.2 Tested...
Aika 0.2 colladaconverter Xml Parsing Buffer Overflow
Exploit for windows platform in category local exploits / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...
CentOS Update for 4Suite CESA-2009:1572 centos4 i386
Check for the Version of 4Suite OpenVAS Vulnerability Test CentOS Update for 4Suite CESA-2009:1572 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Novell File Reporter Agent XML Parsing Stack Buffer Overflow (CVE-2011-0994)
A stack buffer overflow vulnerability has been reported in the Agent component of Novell File Reporter. The vulnerability is due to improper boundary checks of user-supplied NAME tags in the input XML. The vulnerability is triggered upon parsing of a malicious XML tag with overly long content...
ejabberd XML Parsing Denial of Service Vulnerability - Windows
ejabberd is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ejabberd XML Parsing Denial of Service Vulnerability (Windows)
This host is installed with ejabberd and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodejabberddosvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ ejabberd XML Parsing Denial of Service Vulnerability Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod...
CVE-2011-1753
expaterl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of neste...
Novell File Reporter Agent XML Parsing Remote Code Execution
Binary data 5907.prm...
PHP <5.2.11 ext-xml-xml.c文件xml_utf8_decode函数整数溢出漏洞
No description provided by source...
Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability
Novell File Reporter is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability
This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability Authors: Antu Sana...
ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability
ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-116 April 4, 2011 -- CVE ID: CVE-2011-0994 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell File Reporter --...
Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The flaw exists within the NFRAgent.exe component which listens by default on TCP port 3037. When handling...
CentOS Update for apr-util CESA-2010:0950 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for apr-util RHSA-2010:0950-01
Check for the Version of apr-util OpenVAS Vulnerability Test RedHat Update for apr-util RHSA-2010:0950-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...