Skip to contentXmlsoft vulnerabilities
Newest
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects NokogiriCVE-2019-13118Fix available5.3 Medium
- xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 moreUninitialized read in Nokogiri gemCVE-2019-13117Fix available5.3 Medium
- xmlsoft libxslt, debian linux, google chrome +2 moreNokogiri implementation of libxslt vulnerable to heap corruptionCVE-2019-5815Fix available7.5 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- redhat jboss core services, xmlsoft libxml2 +1 morelibxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a...CVE-2016-95986.5 Medium
- redhat jboss core services, xmlsoft libxml2 +1 morelibxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context...CVE-2016-95966.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 morelibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...CVE-2018-14567Fix available6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreNokogiri NULL Pointer DereferenceCVE-2018-14404Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreUncontrolled resource consumption in nokogiriCVE-2017-18258Fix available6.5 Medium
- xmlsoft libxml2, debian linux +1 moreThe xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote...CVE-2018-9251Fix available5.3 Medium
- google chrome, xmlsoft libxml2, debian linux +3 more +5 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-15412Fix available8.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreparser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...CVE-2017-16931Fix available9.8 Critical
- google chrome, xmlsoft libxml2, debian linux +2 moreAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...CVE-2017-5130Fix available8.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-16932Fix available7.5 High
- xmlsoft libxml2, debian linux, google android +3 more +5 moreBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...CVE-2017-7376Public exploitFix availableEPSS 23.2%9.8 Critical
- xmlsoft libxml2, debian linux, google android +3 more +5 moreA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...CVE-2017-7375Fix available9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds read in nokogiriCVE-2017-9050Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...CVE-2017-9049Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...CVE-2017-9048Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...CVE-2017-9047Fix available7.5 High
- xmlsoft libxml2The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a...CVE-2017-8872Fix available9.1 Critical
- xmlsoft libxml2** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...CVE-2017-5969Fix availableDisputed4.7 Medium
- xmlsoft libxsltIn libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random...CVE-2015-9019Fix available5.3 Medium
- debian linux, google chrome, xmlsoft libxslt +3 more +5 moreNokogiri implementation of libxslt lacks integer overflow checksCVE-2017-5029Fix available8.8 High
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...CVE-2016-95977.5 High
- xmlsoft libxml2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreCVE-2016-9318 does not affect BellSoft softwareCVE-2016-9318Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +5 more +7 moreNokogiri does not forbid namespace nodes in XPointer rangesCVE-2016-4658Fix available9.8 Critical
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- apple icloud, itunes, xmlsoft libxslt +2 more +4 morelibxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud...CVE-2016-4610Fix available9.8 Critical
- apple icloud, itunes, tvos +6 more +8 morelibxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud...CVE-2016-4609Fix available9.8 Critical
- apple icloud, itunes, xmlsoft libxslt +1 more +3 morelibxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud...CVE-2016-4608Fix available9.8 Critical
- apple icloud, itunes, tvos +5 more +7 morelibxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud...CVE-2016-4607Fix available9.8 Critical
- xmlsoft libxml2, apple icloud, iphone os +15 more +17 moreFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...CVE-2016-4448Fix available9.8 Critical
- google chrome, xmlsoft libxslt +1 morenumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the...CVE-2016-1684Fix available7.5 High
- google chrome, xmlsoft libxslt, canonical ubuntu linux +7 more +9 morenumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles...CVE-2016-1683Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...CVE-2016-4449Fix available7.1 High
- xmlsoft libxml2, apple iphone os, itunes +8 more +10 moreThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...CVE-2016-4447Fix availableEPSS 14.0%7.5 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...CVE-2016-1840Fix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1839Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...CVE-2016-1838Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...CVE-2016-1837Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...CVE-2016-1836Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...CVE-2016-1834Public exploitFix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1833Fix available5.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...CVE-2016-3705Fix available7.5 High
- xmlsoft libxml2, debian linux, oracle solaris +2 moreThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent...CVE-2016-4483Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreDenial of service or RCE from libxml2 and libxsltCVE-2015-8806Fix available7.5 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...CVE-2016-2073Fix available6.5 Medium
- Show moreLoading…