Lucene search
+L

599 matches found

NVD
NVD
•added 2013/05/02 2:55 p.m.•37 views

CVE-2012-5657

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

5CVSS9.3AI score0.01705EPSS
SaveExploits0References6
Prion
Prion
•added 2013/05/02 2:55 p.m.•28 views

Xxe

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

5CVSS7.2AI score0.01705EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2013/05/02 2:55 p.m.•13 views

UBUNTU-CVE-2012-5657

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

5CVSS7.5AI score0.01705EPSS
SaveExploits0References6
Mend
Mend
•added 2013/05/02 2:00 p.m.•1 views

CVE-2012-5657

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

6.9CVSS0.01705EPSS
SaveExploits0References10
CVE
CVE
•added 2013/05/02 2:00 p.m.•110 views

CVE-2012-5657

CVE-2012-5657 affects Zend Framework 1.x Zend_Feed_Rss and Zend_Feed_Atom in Zend Framework 1.11.x (<1.11.15) and 1.12.x (

5CVSS9.1AI score0.01705EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2013/05/02 2:00 p.m.•177 views

CVE-2012-5657

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

9.3AI score0.01705EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/05/02 12:00 a.m.•6 views

CVE-2012-5657: Exposure of Sensitive Information to an Unauthorized Actor

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

5CVSS8.3AI score0.01705EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/05/02 12:00 a.m.•3 views

PT-2013-1828

Name of the Vulnerable Software and Affected Versions Zend Framework versions 1.11.x through 1.11.14 Zend Framework versions 1.12.x through 1.12.0 Description The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service...

5CVSS0.01705EPSS
SaveExploits0References35
NVD
NVD
•added 2013/02/13 5:55 p.m.•35 views

CVE-2012-6531

1 ZendDom, 2 ZendFeed, and 3 ZendSoap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC...

6.4CVSS9.2AI score0.02519EPSS
SaveExploits0References6
NVD
NVD
•added 2013/02/13 5:55 p.m.•24 views

CVE-2012-6532

1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...

5CVSS9.2AI score0.01848EPSS
SaveExploits0References2
Prion
Prion
•added 2013/02/13 5:55 p.m.•32 views

Xxe

ZendXmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML...

6.4CVSS7AI score0.50248EPSS
SaveExploits2References12Affected Software3
Prion
Prion
•added 2013/02/13 5:55 p.m.•31 views

Xxe

1 ZendDom, 2 ZendFeed, and 3 ZendSoap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC...

6.4CVSS7.3AI score0.50248EPSS
SaveExploits2References6Affected Software1
Prion
Prion
•added 2013/02/13 5:55 p.m.•29 views

Design/Logic Flaw

1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...

5CVSS6.7AI score0.01848EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2013/02/13 5:55 p.m.•37 views

CVE-2012-6531

1 ZendDom, 2 ZendFeed, and 3 ZendSoap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC...

6.4CVSS7.3AI score0.02519EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2013/02/13 5:55 p.m.•26 views

CVE-2012-6532

1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...

5CVSS7.2AI score0.01848EPSS
SaveExploits0References2
OSV
OSV
•added 2013/02/13 5:55 p.m.•13 views

UBUNTU-CVE-2012-6532

1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...

5CVSS7.3AI score0.01848EPSS
SaveExploits0References3
OSV
OSV
•added 2013/02/13 5:55 p.m.•12 views

UBUNTU-CVE-2012-3363

ZendXmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML...

9.1CVSS5.9AI score0.50248EPSS
SaveExploits2References4
OSV
OSV
•added 2013/02/13 5:55 p.m.•11 views

UBUNTU-CVE-2012-6531

1 ZendDom, 2 ZendFeed, and 3 ZendSoap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC...

6.4CVSS7.5AI score0.02519EPSS
SaveExploits0References8
Mend
Mend
•added 2013/02/13 5:00 p.m.•1 views

CVE-2012-3363

ZendXmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML...

9.3CVSS0.50248EPSS
SaveExploits2References16
Vulnrichment
Vulnrichment
•added 2013/02/13 5:00 p.m.•18 views

CVE-2012-3363

ZendXmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML...

7.2AI score0.50248EPSS
SaveExploits2References12
Rows per page
Query Builder