Lucene search
+L

189 matches found

Tenable Nessus
Tenable Nessus
added 2022/02/22 12:00 a.m.33 views

openSUSE 15 Security Update : xerces-j2 (openSUSE-SU-2022:0503-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0503-1 advisory. - There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the...

7.1CVSS7.3AI score0.0444EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:00 a.m.39 views

openSUSE 15 Security Update : xerces-j2 (openSUSE-SU-2022:0500-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0500-1 advisory. - There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the...

7.1CVSS7.3AI score0.0444EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/19 12:00 a.m.28 views

SUSE SLED15 / SLES15 Security Update : xerces-j2 (SUSE-SU-2022:0503-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0503-1 advisory. - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser bsc1195108. Tenable has extracted the preceding...

7.1CVSS6.8AI score0.0444EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/01/27 4:13 p.m.80 views

Infinite Loop in Apache Xerces Java

There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present withi...

7.1CVSS3AI score0.0444EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
added 2022/01/26 12:00 a.m.30 views

Apache Xerces Denial of Service Vulnerability

Xerces is an organization promoted by Apache an XML document parsing open source project . A denial of service vulnerability exists in the XML parser in Apache Xerces Java version 2.12.1 and prior versions, which stems from a failure to properly handle incoming error messages, and can be exploite...

7.1CVSS6.8AI score0.0444EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/24 3:15 p.m.2 views

DEBIAN-CVE-2022-23437

There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present withi...

6.5CVSS7.1AI score0.0444EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/24 3:15 p.m.9 views

CVE-2022-23437

There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present withi...

6.5CVSS6.6AI score
SaveExploits0References5
OSV
OSV
added 2022/01/24 3:15 p.m.7 views

UBUNTU-CVE-2022-23437

There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present withi...

6.5CVSS6.8AI score0.0444EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/01/24 12:00 a.m.5 views

Xerces 安全漏洞

Xerces is an organization promoted by Apache an XML document parsing open source project . A denial of service vulnerability exists in the XML parser in Apache Xerces Java version 2.12.1 and prior versions, which stems from a failure to properly handle incoming error messages, and can be exploite...

7.1CVSS8.3AI score0.0444EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2022/01/24 12:00 a.m.13 views

PT-2022-15994

Name of the Vulnerable Software and Affected Versions Apache Xerces Java XercesJ versions 2.12.1 and earlier Description The issue arises when the Apache Xerces Java XercesJ XML parser handles specially crafted XML document payloads, causing it to enter an infinite loop. This loop may consume...

10CVSS6.9AI score0.81039EPSS
SaveExploits17References92
Tenable Nessus
Tenable Nessus
added 2021/09/07 12:00 a.m.27 views

openSUSE 15 Security Update : xerces-c (openSUSE-SU-2021:1231-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1231-1 advisory. - The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not be...

8.1CVSS7.5AI score0.09503EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/09/07 12:00 a.m.39 views

openSUSE 15 Security Update : xerces-c (openSUSE-SU-2021:2958-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2958-1 advisory. - The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not be...

8.1CVSS7.5AI score0.09503EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/09/06 12:00 a.m.19 views

SUSE SLED15 / SLES15 Security Update : xerces-c (SUSE-SU-2021:2958-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2958-1 advisory. - CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs bsc1159552. Tenable has extracted the preceding...

8.1CVSS7.2AI score0.09503EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/09/04 12:00 a.m.27 views

SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2021:2944-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2944-1 advisory. - CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs bsc1159552. Tenable has extracted the...

8.1CVSS7.2AI score0.09503EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/09/04 12:00 a.m.33 views

SUSE SLES15 Security Update : xerces-c (SUSE-SU-2021:2920-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2920-1 advisory. - CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs bsc1159552. Tenable has extracted the preceding...

8.1CVSS7.2AI score0.09503EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/08 8:36 p.m.35 views

Security Bulletin: Vulnerability in Apache Xerces-C XML parser, including XML4C affects IBM InfoSphere Optim Masking On Demand

Summary Open Source Xerces-C XML parser vulnerability affects IBM InfoSphere Optim Masking On Demand Data Privacy components. Vulnerability Details CVEID: CVE-2016-0729 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking during...

9.8CVSS0.6AI score0.09115EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2016:2154-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9AI score0.14138EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/20 5:30 a.m.33 views

Security Bulletin: IBM App Connect Enterprise & IBM Integration Bus are affected by vulnerabilities in Apache Xerces-C 3.0.0 to 3.2.2 XML parser (CVE-2018-1311)

Summary Vulnerabilities in Apache Xerces-C 3.0.0 to 3.2.2 XML parser affect IBM Integration Bus and IBM App Connect Enterprise . IBM App Connect Enterprise and IBM Integration Bus have addressed the applicable CVEs Vulnerability Details CVEID: CVE-2018-1311 DESCRIPTION: Apache Xerces-C could allo...

8.1CVSS1.4AI score0.09503EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:00 a.m.28 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : xerces-c Vulnerability (NS-SA-2020-0114)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has xerces-c packages installed that are affected by a vulnerability: - The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been...

8.1CVSS7.5AI score0.09503EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/14 4:31 p.m.61 views

Security Bulletin: Security vulnerabilities have been fixed in the IBM Security Access Manager and IBM Security Verify Access products

Summary Fixes for security vulnerabilities identified in IBM Security Access Manager and IBM Security Verify Access are available. Vulnerability Details CVEID: CVE-2020-11868 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a flaw in ntpd. By sending a server mode packet with a...

9.8CVSS1.1AI score0.18345EPSS
SaveExploits6Affected Software2
Rows per page
Query Builder