905 matches found
CBL Mariner 2.0 Security Update: xerces-c (CVE-2024-23807)
The version of xerces-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory. - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered...
CVE-2024-23807 affecting package xerces-c for versions less than 3.2.4-2
CVE-2024-23807 affecting package xerces-c for versions less than 3.2.4-2. A patched version of the package is available...
Apache Xerces C++: Use-after-free on external DTD scan
...
CVE-2024-23807 affecting package xerces-c for versions less than 3.2.4-2
CVE-2024-23807 affecting package xerces-c for versions less than 3.2.4-2. A patched version of the package is available...
Advisory ROSA-SA-2025-2621
software: xerces-j2 2.12.0 WASP: ROSA-CHROME packageevrstring: xerces-j2-2.12.0-4 CVE-ID: CVE-2022-23437 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Apache Xerces Java XercesJ XML parser causes it to hang in an infinite loop when processing specially crafted XML documents...
K000149270: Apache Xerces vulnerability CVE-2023-37536
Security Advisory Description An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. CVE-2023-37536 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...
Advisory ROSA-SA-2025-2562
Software: xerces-c 3.1.1 OS: rosa-server79 packageevrstring: xerces-c-3.1.1-10.0.1.res7 CVE-ID: CVE-2023-37536 BDU-ID: 2023-06960 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Heerces C++ library of the BigFix Platform IT Collaborative Management Platform is caused by an integer overflow...
Oracle Linux 7 : xerces-c (ELSA-2024-8795)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8795 advisory. 3.1.1-10.0.1 - back port fix for CVE-2023-37536 Orabug: 37241079 Tenable has extracted the preceding description block directly from the Oracle Linux security...
xerces-c security update
3.1.1-10.0.1 - back port fix for CVE-2023-37536 Orabug: 37241079...
SUSE-RU-2024:3971-1 Recommended update for mojo-parent
This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets bsc1201684 - Changes and Bugs fixed: Java 8 is now the minimum requirement...
RHSA-2024:8795 Red Hat Security Advisory: xerces-c security update
Bulletin has no description...
RHEL 7 : xerces-c (RHSA-2024:8795)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8795 advisory. Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and writ...
Important: Red Hat Security Advisory: xerces-c security update
An update for xerces-c is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
xerces-c: An integer overflow issue that allows remote attackers to cause out-of-bound access via HTTP request
An integer overflow exists in xerces-c++. This flaw allows an attacker using a specially crafted HTTP request payload to trigger an out-of-bounds read, resulting in a loss of confidentiality, integrity, and availability...
Security Bulletin: Apache Xerces vulnerability Affects IBM Jazz Reporting Service
Summary Apache Xerces-J XML parser XML4J shipped with IBM Jazz Reporting Service is vulnerable to a denial of service attack that can be triggered by malformed XML data. Vulnerability Details CVEID:CVE-2020-14338 DESCRIPTION: Wildfly could allow a remote attacker to bypass security restrictions,...
Oracle Essbase Multiple Vulnerabilities (October 2024 CPU)
The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2024 Critical Patch Update CPU. It is, therefore, affected by: - Vulnerability in Oracle Essbase component: Essbase Web Platform curl. The supported version that is affected is 21.6. Easily...
Amazon Linux 2 : xerces-j2 (ALAS-2024-2649)
The version of xerces-j2 installed on the remote host is prior to 2.11.0-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2649 advisory. Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted...
Medium: xerces-j2
Issue Overview: Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions. CVE-2012-0881 There's a vulnerability within the Apache Xerces Java XercesJ XML parser when...