Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2021-21783

Disclosure Date: March 25, 2021 (last updated February 22, 2025)
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Attacker Value
Unknown

CVE-2020-13574

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Attacker Value
Unknown

CVE-2020-13575

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
0
Attacker Value
Unknown

CVE-2020-13576

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Attacker Value
Unknown

CVE-2020-13577

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Attacker Value
Unknown

CVE-2020-13578

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Attacker Value
Unknown

CVE-2017-9765

Disclosure Date: July 20, 2017 (last updated November 08, 2023)
Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.
0