7894 matches found
CVE-2022-50999
A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information...
CVE-2022-50998
A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...
CVE-2021-47996
A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...
RHSA-2026:60394 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow
A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially...
libxml2 security update
2.12.5-10.3 - Fix CVE-2026-11979 RHEL-215571...
RHEL 10 : libxml2 (RHSA-2026:60394)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60394 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary cod...
ALSA-2026:60394 Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow CVE-2026-11979 For more details about the security issues, including the impact, a CVSS score,...
Out-of-Bounds
Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-Bounds via the buffer handling process in the packaged libxml2 component. An attacker can cause out-of-bounds memory writes ...
NULL Pointer Dereference
Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to NULL Pointer Dereference via the XML Schema processing in the packaged libxml2 library. An attacker can cause a segmentation fault...
CVE-2024-58377
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2025-71407
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2025-71346
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2024-58378
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2023-54354
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2022-51000
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2022-50999
Rejected reason: This CVE ID has been rejected as a duplicate...