Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Makina-corpus Clear all filters
TI-2014-02588 CVE-2014-3243 · GHSA-2gh8-gr6x-7q26

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows…

Priority LOW 28

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of ne…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0268 Published 2014-05-12 Partial fix · 0.12.6 CWE-119
TI-2014-02587 CVE-2014-3242 · GHSA-52wr-3vww-rmpq

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request…

Priority LOW 26

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01812 Published 2014-05-12 Will not fix CWE-200