Skip to content
Apache Xerces-c vulnerabilities
-
apache software foundation xerces c++, apache xerces-c, xerces-c\+\+ +2 more
Apache Xerces C++: Use-after-free on external DTD scan
CVE-2024-23807
Fix available
9.8 Critical
-
hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 more
HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3
CVE-2023-37536
Fix available
8.2 High
-
apache software foundation xerces-c, apache xerces-c\+\+, debian linux +8 more +10 more
The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during...
CVE-2018-1311
Public exploitFix available
8.1 High
-
apache xerces-c\+\+, apache software foundation xerces c++ +1 more
In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result...
CVE-2017-12627
Fix available
9.8 Critical
-
apache xerces-c\+\+
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a...
CVE-2012-0880
7.5 High
-
apache xerces-c\+\+, debian linux +1 more
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers...
CVE-2016-4463
Public exploitFix available
EPSS 14.2%
7.5 High
-
apache xerces-c\+\+, opensuse +1 more
Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and...
CVE-2016-2099
Fix available
9.8 Critical
-
apache xerces-c\+\+, debian linux, fedoraproject fedora +2 more
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial...
CVE-2015-0252
Public exploitFix available
EPSS 38.7%
5.0 Medium
-
apache xerces-c\+\+
Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2...
CVE-2009-1885
Fix available
4.3 Medium
-
apache xerces-c\+\+
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of...
CVE-2008-4482
7.8 High
-
apache xerces-c\+\+
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU...
CVE-2004-1575
5.0 Medium