Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2017-10672

perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVSS 3.1 · 9.8 Critical EPSS 7.9% KEV · Not listed
Vendors
Debian Xml-libxml Project
Products
Debian Linux Xml-libxml
CVE-2015-3451

perl-XML-LibXML: "expand_entities" option was not preserved under some circumstances

The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVSS 2.0 · 5.0 Medium EPSS 4.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more