Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 144

Export CSV
CVE-2016-4608

libxslt: stack-based buffer overflow at exsltDateFormat()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Apple Fedoraproject Microsoft and 1 more
Products
Icloud Iphone Os Itunes and 6 more
CVE-2016-4609

libxslt: Out-of-bounds read at xmlGetLineNoInternal()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Icloud Iphone Os Itunes and 7 more
CVE-2016-4610

libxslt: Invalid memory access leading to DoS at exsltDynMapFunction()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Icloud Iphone Os Itunes and 7 more
CVE-2010-4008

libxml2: Crash (stack frame overflow or NULL pointer dereference) by traversal of XPath axis

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Apache Apple Canonical and 6 more
Products
Openoffice Iphone Os Itunes and 13 more
CVE-2012-2870

libxslt: Use-after-free when processing an invalid XPath expression

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Apple Google Redhat and 1 more
Products
Iphone Os Chrome Enterprise Linux and 1 more
CVE-2012-0841

libxml2: hash table collisions CPU usage DoS

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Apple Redhat Xmlsoft
Products
Iphone Os Enterprise Linux Libxml2
CVE-2011-1944

libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging nodesets

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.

CVSS 2.0 · 9.3 Critical EPSS 13.4% KEV · Not listed
Vendors
Redhat Xmlsoft
Products
Enterprise Linux Libxml Libxml2
CVE-2011-1202

libxslt: Heap address leak in XLST

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Google Redhat Xmlsoft
Products
Chrome Enterprise Linux Libxslt
CVE-2010-4494

libxml2: double-free in XPath processing code

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

CVSS 2.0 · 7.5 High EPSS 5.9% KEV · Not listed
Vendors
Apache Apple Debian and 7 more
Products
Openoffice Iphone Os Itunes and 15 more
CVE-2013-4520

libxslt: DoS when reading unexpected DTD nodes in XSLT in versions prior to 1.1.25

xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Xmlsoft
Products
Libxslt
CVE-2013-2877

libxml2: Out-of-bounds read via a document that ends abruptly

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.

CVSS 2.0 · 5.0 Medium EPSS 5.0% KEV · Not listed
Vendors
Google Redhat Xmlsoft
Products
Chrome Enterprise Linux Libxml2
CVE-2013-1969

libxml2: multiple use-after-free flaws

Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Xmlsoft
Products
Libxml2
CVE-2013-0339

libxml2: CPU consumption DoS and other effects when performing string substitutions during external entities expansion

libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because libxml2 already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed and each affected application would need its own CVE.

CVSS 2.0 · 6.8 Medium EPSS 3.6% KEV · Not listed
Vendors
Canonical Debian Suse and 1 more
Products
Ubuntu Linux Debian Linux Linux Enterprise Server and 1 more
CVE-2013-0338

libxml2: CPU consumption DoS when performing string substitutions during entities expansion

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Opensuse Redhat and 1 more
Products
Ubuntu Linux Opensuse Enterprise Linux and 1 more
CVE-2012-6139

libxslt: two DoS issues fixed in 1.1.28

libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.

CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Vendors
Opensuse Xmlsoft
Products
Opensuse Libxslt
CVE-2012-5134

libxml2: Heap-buffer-underflow in xmlParseAttValueComplex

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Apple Google Redhat and 1 more
Products
Iphone Os Chrome Enterprise Linux and 1 more
CVE-2012-2871

libxslt: Heap-buffer overflow caused by bad cast in XSL transforms

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Apple Google Redhat and 1 more
Products
Iphone Os Chrome Enterprise Linux and 1 more
CVE-2019-5815

chromium-browser: Heap buffer overflow in Blink

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Debian Redhat Xmlsoft
Products
Debian Linux Rhel Extras Libxslt
CVE-2018-9251

libxml2: infinite loop in xz_decomp function in xzlib.c

The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.

CVSS 3.0 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Debian Redhat Xmlsoft
Products
Debian Linux Enterprise Linux Libxml2