Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xml-rpc vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2010-3583
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle ...
Oracle Vm 2.2.1
7.5
CVSSv2
CVE-2005-1992
The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote malicious users to execute arbitrary commands.
Yukihiro Matsumoto Ruby 1.8
7.5
CVSSv2
CVE-2014-9057
SQL injection vulnerability in the XML-RPC interface in Movable Type prior to 5.18, 5.2.x prior to 5.2.11, and 6.x prior to 6.0.6 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Debian Debian Linux 7.0Sixapart Movable Type 6.0.5Sixapart Movable Type 6.0Sixapart Movable Type 5.2.2Sixapart Movable Type 5.2.4Sixapart Movable Type 5.2.9Sixapart Movable TypeSixapart Movable Type 6.0.4Sixapart Movable Type 6.0.3Sixapart Movable Type 6.0.2Sixapart Movable Type 6.0.1Sixapart Movable Type 5.2.5Sixapart Movable Type 5.2.6Sixapart Movable Type 5.2.7Sixapart Movable Type 5.2.8Sixapart Movable Type 5.2Sixapart Movable Type 5.2.3Sixapart Movable Type 5.2.10
7.5
CVSSv2
CVE-2005-2498
Eval injection vulnerability in PHPXMLRPC 1.1.1 and previous versions (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote malicious users to execute arbitrary PHP code via certain nested XML t...
Gggeek PhpxmlrpcDebian Debian Linux 3.1
9
CVSSv2
CVE-2010-0597
Unspecified vulnerability in Cisco Mediator Framework 1.5.1 prior to 1.5.1.build.14-eng, 2.2 prior to 2.2.1.dev.1, and 3.0 prior to 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users t...
Cisco Mediator Framework 2.2Cisco Mediator Framework 3.0.8Cisco Mediator Framework 1.5.1
10
CVSSv2
CVE-2010-0600
Cisco Mediator Framework 1.5.1 prior to 1.5.1.build.14-eng, 2.2 prior to 2.2.1.dev.1, and 3.0 prior to 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified conf...
Cisco Mediator Framework 2.2Cisco Mediator Framework 3.0.8Cisco Mediator Framework 1.5.1
4.3
CVSSv2
CVE-2019-16935
The documentation XML-RPC server in Python up to and including 2.7.16, 3.x up to and including 3.6.9, and 3.7.x up to and including 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_ser...
Python PythonDebian Debian Linux 9.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04
5.8
CVSSv2
CVE-2014-0173
The Jetpack plugin prior to 1.9 prior to 1.9.4, 2.0.x prior to 2.0.9, 2.1.x prior to 2.1.4, 2.2.x prior to 2.2.7, 2.3.x prior to 2.3.7, 2.4.x prior to 2.4.4, 2.5.x prior to 2.5.2, 2.6.x prior to 2.6.3, 2.7.x prior to 2.7.2, 2.8.x prior to 2.8.2, and 2.9.x prior to 2.9.3 for WordP...
Automattic Jetpack 2.6Automattic Jetpack 2.5Automattic Jetpack 2.3.2Automattic Jetpack 2.3.1Automattic Jetpack 2.2Automattic Jetpack 2.1.2Automattic Jetpack 1.9.2Automattic Jetpack 1.9.1Automattic Jetpack 2.9.1Automattic Jetpack 2.9Automattic Jetpack 2.8Automattic Jetpack 2.4Automattic Jetpack 2.3.5Automattic Jetpack 2.2.4Automattic Jetpack 2.2.3Automattic Jetpack 2.0.4Automattic Jetpack 2.0.3Automattic Jetpack 2.0.2Automattic Jetpack 2.7Automattic Jetpack 2.6.1Automattic Jetpack 2.3.4Automattic Jetpack 2.3.3
7.1
CVSSv2
CVE-2007-5824
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and previous versions allows remote malicious users to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authorization header line, which triggers a crash in ...
Firefly Media Server
7.5
CVSSv2
CVE-2007-5825
Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and previous versions allows remote malicious users to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the (1) username or ...
Firefly Media Server 0.2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook