Lucene search
+L

7421 matches found

Ubuntu
Ubuntu
added 2022/01/12 12:46 p.m.128 views

USN-5225-1: lxml vulnerability

It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to execute arbitrary code...

8.2CVSS7.7AI score0.02477EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/01/06 12:00 a.m.44 views

EulerOS Virtualization 3.0.2.6 : libxml2 (EulerOS-SA-2021-2884)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed ...

8.8CVSS7.1AI score0.0828EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/12/31 12:00 a.m.33 views

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-2884)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.0828EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/12/30 12:00 a.m.33 views

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-2833)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.3AI score0.0199EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/12/29 12:00 a.m.39 views

EulerOS Virtualization 3.0.2.0 : libxml2 (EulerOS-SA-2021-2833)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed ...

7.8CVSS7.2AI score0.0199EPSS
SaveExploits1References2
Redos
Redos
added 2021/12/24 12:00 a.m.17 views

ROS-2-1891

2.1891 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to a...

6.5CVSS7.3AI score0.01964EPSS
SaveExploits0
Redos
Redos
added 2021/12/24 12:00 a.m.17 views

ROS-2-1695

2.1695 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to a...

6.5CVSS7.5AI score0.01964EPSS
SaveExploits0
Redos
Redos
added 2021/12/24 12:00 a.m.8 views

ROS-2-2045

2.2045 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to a...

6.5CVSS7.3AI score0.01964EPSS
SaveExploits0
Redos
Redos
added 2021/12/24 12:00 a.m.19 views

ROS-2-1543

2.1543 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to a...

7.4AI score0.01964EPSS
SaveExploits0
Redos
Redos
added 2021/12/24 12:00 a.m.23 views

ROS-2-1424

2.1424 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to a...

6.5CVSS7.4AI score0.01964EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/11/18 12:00 a.m.53 views

CentOS: Security Advisory for libxml2 (CESA-2021:3810)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.7AI score0.09287EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/11/18 12:00 a.m.36 views

CentOS: Security Advisory for libxml2 (CESA-2020:3996)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.9AI score0.07836EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2021/11/17 2:46 p.m.873 views

libxml2 security update

CentOS Errata and Security Advisory CESA-2021:3810 An update for libxml2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

10CVSS6.7AI score0.09287EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:00 a.m.97 views

CentOS 7 : libxml2 (RHSA-2021:3810)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3810 advisory. - xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid...

10CVSS7.7AI score0.09287EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2021/11/09 8:26 a.m.53 views

python-lxml security update

An update is available for python-lxml. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list lxml is an XML processing library providing access to libxml2 and libxslt...

6.1CVSS6.6AI score0.04035EPSS
SaveExploits1
Veracode
Veracode
added 2021/11/09 3:48 a.m.41 views

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service. An attacker can crash the application or execute arbitrary code through the xmlParseAttValueComplex function in parser.c by providing long XML entity name...

10CVSS6.3AI score0.23373EPSS
SaveExploits9References57Affected Software1
Amazon
Amazon
added 2021/11/04 12:00 a.m.136 views

Important: java-11-amazon-corretto

Issue Overview: There is a flaw in the xml entity encoding functionality of libxml2. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to...

8.6CVSS6.6AI score0.159EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:00 a.m.12 views

The vulnerability of the XML object encoding function in the Libxml2 library, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of XML object encoding functions in the Libxml2 library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

8.6CVSS7AI score0.0828EPSS
SaveExploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:00 a.m.8 views

The vulnerability of the xinclude.c component in the Libxml2 library arises from the use of memory after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xinclude.c component in the Libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created fi...

8.8CVSS6.8AI score0.03653EPSS
SaveExploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:00 a.m.10 views

The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software occurs due to writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.6AI score0.02713EPSS
SaveExploits0References7Affected Software4
Rows per page
Query Builder