Skip to contentXmlsoft Libxml vulnerabilities
- google chrome, xmlsoft libxml2, debian linux +3 more +5 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-15412Fix available8.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreparser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...CVE-2017-16931Fix available9.8 Critical
- google chrome, xmlsoft libxml2, debian linux +2 moreAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...CVE-2017-5130Fix available8.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-16932Fix available7.5 High
- xmlsoft libxml2, debian linux, google android +3 more +5 moreBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...CVE-2017-7376Public exploitFix availableEPSS 23.2%9.8 Critical
- xmlsoft libxml2, debian linux, google android +3 more +5 moreA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...CVE-2017-7375Fix available9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds read in nokogiriCVE-2017-9050Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...CVE-2017-9049Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...CVE-2017-9048Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...CVE-2017-9047Fix available7.5 High
- xmlsoft libxml2The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a...CVE-2017-8872Fix available9.1 Critical
- xmlsoft libxml2** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...CVE-2017-5969Fix availableDisputed4.7 Medium
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...CVE-2016-95977.5 High
- xmlsoft libxml2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreCVE-2016-9318 does not affect BellSoft softwareCVE-2016-9318Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +5 more +7 moreNokogiri does not forbid namespace nodes in XPointer rangesCVE-2016-4658Fix available9.8 Critical
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- xmlsoft libxml2, apple icloud, iphone os +15 more +17 moreFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...CVE-2016-4448Fix available9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...CVE-2016-4449Fix available7.1 High
- xmlsoft libxml2, apple iphone os, itunes +8 more +10 moreThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...CVE-2016-4447Fix availableEPSS 14.0%7.5 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...CVE-2016-1840Fix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1839Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...CVE-2016-1838Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...CVE-2016-1837Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...CVE-2016-1836Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...CVE-2016-1834Public exploitFix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1833Fix available5.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...CVE-2016-3705Fix available7.5 High
- xmlsoft libxml2, debian linux, oracle solaris +2 moreThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent...CVE-2016-4483Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreDenial of service or RCE from libxml2 and libxsltCVE-2015-8806Fix available7.5 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...CVE-2016-2073Fix available6.5 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- xmlsoft libxml2, apple iphone os, mac os x +4 more +6 moreThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...CVE-2015-8035Fix available2.6 Low
- xmlsoft libxml2, apple iphone os, mac os x +6 more +8 moreThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...CVE-2015-7942Fix available6.8 Medium
- php, xmlsoft libxml2 +1 moreThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...CVE-2015-6838Fix available7.5 High
- php, xmlsoft libxml2 +1 moreThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...CVE-2015-6837Fix available7.5 High
- xmlsoft libxml2, debian linux +1 moreThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...CVE-2015-8710Public exploitFix available9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux +1 morelibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...CVE-2015-7941Fix available4.3 Medium
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 Medium
- google chrome, xmlsoft libxml2 +1 moreparser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products...CVE-2013-2877Fix available5.0 Medium
- xmlsoft libxml2Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow...CVE-2013-19697.5 High
- Show moreLoading…