Lucene search
+L

957 matches found

OSV
OSV
•added 2016/08/25 10:58 a.m.•20 views

SUSE-SU-2016:2154-1 Security update for xerces-c

xerces-c was updated to fix one security issue. This security issue was fixed: - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

10CVSS6.9AI score0.1617EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2016/07/27 12:00 a.m.•40 views

FreeBSD : xercesi-c3 -- multiple vulnerabilities (cb09a7aa-5344-11e6-a7bd-14dae9d210b8)

Apache reports : The Xerces-C XML parser fails to successfully parse a DTD that is deeply nested, and this causes a stack overflow, which makes a denial of service attack against many applications possible by an unauthenticated attacker. Also, CVE-2016-2099: Use-after-free vulnerability in...

10CVSS7AI score0.1617EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2016/07/19 12:00 a.m.•13 views

The vulnerability of the Xerces C++ library allows a hacker to trigger a service failure.

The vulnerability of the Xerces C++ library arises from buffer overflows in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by using embedded DTD files...

5CVSS6.9AI score0.1617EPSS
SaveExploits0References11Affected Software2
F5 Networks
F5 Networks
•added 2016/07/18 12:00 a.m.•81 views

SOL04253390 - Apache Xerces vulnerability CVE-2016-2099

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

10CVSS2.2AI score0.07054EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2016/07/18 12:00 a.m.•27 views

openSUSE Security Update : xerces-c (openSUSE-2016-876)

This update for xerces-c fixes the following issues : - CVE-2016-4463 Apache Xerces-C XML Parser Crashes on Malformed DT boo985860 - CVE-2016-2099 Exception handling mistake causing use after free boo979208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

10CVSS6.8AI score0.1617EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2016/07/15 12:00 a.m.•31 views

Fedora 24 : xerces-c (2016-9284772686)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

10CVSS6.9AI score0.1617EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/07/15 12:00 a.m.•46 views

Fedora 24 : mingw-xerces-c (2016-0a061f6dd9)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

10CVSS6.8AI score0.1617EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/07/15 12:00 a.m.•33 views

Fedora 22 : xerces-c (2016-84373c5f4f)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

10CVSS6.9AI score0.1617EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/07/15 12:00 a.m.•28 views

Fedora 23 : xerces-c (2016-d2d6890690)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

10CVSS6.9AI score0.1617EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/07/15 12:00 a.m.•37 views

Fedora 22 : mingw-xerces-c (2016-7615febbd6)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

10CVSS6.8AI score0.1617EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/07/15 12:00 a.m.•45 views

Fedora 23 : mingw-xerces-c (2016-87e8468465)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

10CVSS6.8AI score0.1617EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2016/07/10 12:00 a.m.•32 views

Fedora Update for mingw-xerces-c FEDORA-2016-0a061f6dd9

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.1617EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/07/10 12:00 a.m.•34 views

Fedora Update for mingw-xerces-c FEDORA-2016-7615febbd6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.09115EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/07/10 12:00 a.m.•41 views

Fedora Update for mingw-xerces-c FEDORA-2016-87e8468465

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.1617EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/07/10 12:00 a.m.•40 views

Fedora Update for xerces-c FEDORA-2016-d2d6890690

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.1617EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/07/10 12:00 a.m.•32 views

Fedora Update for xerces-c FEDORA-2016-84373c5f4f

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.1617EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/07/10 12:00 a.m.•31 views

Fedora Update for xerces-c FEDORA-2016-9284772686

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.1617EPSS
SaveExploits0References2
NVD
NVD
•added 2016/07/08 7:59 p.m.•27 views

CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS8.3AI score0.1617EPSS
SaveExploits0References15
OSV
OSV
•added 2016/07/08 7:59 p.m.•11 views

DEBIAN-CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS6.8AI score0.1617EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2016/07/08 7:59 p.m.•23 views

CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS7.4AI score
SaveExploits0References15
Rows per page
Query Builder