Lucene search
K

6885 matches found

NVD
NVD
added 2025/11/07 9:15 p.m.2 views

CVE-2025-12863

Rejected reason: This CVE was assigned for a libxml2 issue1012 but later deemed not valid. Ref.: https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012note2608283...

0.00068EPSS
Exploits0
CVE
CVE
added 2025/11/07 8:59 p.m.16 views

CVE-2025-12863

CVE-2025-12863 entry is rejected/not used and does not represent an active vulnerability.

6.2AI score0.00068EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/11/07 8:59 p.m.1 views

CVE-2025-12863

...

5.4AI score0.00068EPSS
Exploits0
Cvelist
Cvelist
added 2025/11/07 8:59 p.m.5 views

CVE-2025-12863

...

0.00068EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/11/07 8:59 p.m.9 views

CVE-2025-12863

Removed by vendor...

5.5AI score0.00068EPSS
Exploits0
EUVD
EUVD
added 2025/11/07 8:59 p.m.1 views

EUVD-2025-38299

A flaw was found in the xmlSetTreeDoc function of the libxml2 XML parsing library. This function is responsible for updating document pointers when XML nodes are moved between documents. Due to improper handling of namespace references, a namespace pointer may remain linked to a freed memory regi...

7.5CVSS6AI score0.00068EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/11/07 8:59 p.m.2 views

CVE-2025-12863

A flaw was found in the xmlSetTreeDoc function of the libxml2 XML parsing library. This function is responsible for updating document pointers when XML nodes are moved between documents. Due to improper handling of namespace references, a namespace pointer may remain linked to a freed memory regi...

7.5CVSS6.1AI score0.00068EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.2 views

编号撤回

libxml2 is a GNOME open source library for parsing XML documents. It is written in C and can be called by many languages, such as C, C++, XSH. A resource management error vulnerability exists in libxml2, which stems from an improper handling of namespace references in the xmlSetTreeDoc function,...

5.4AI score0.00068EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.3 views

PT-2025-45506

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description A flaw exists in the xmlSetTreeDoc function of the libxml2 XML parsing library. This function manages document pointers during XML node movements between documents. Improper handling of...

7.5CVSS6.4AI score0.00068EPSS
Exploits0References7
Snyk
Snyk
added 2025/11/07 12:0 a.m.1 views

Use After Free

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Use After Free via the xmlSetTreeDoc function in the tree.c file. An attacker can cause a crash of services or applications by providing crafted XML content that triggers access to a...

8.7CVSS5.3AI score0.00068EPSS
Exploits0References2
OSV
OSV
added 2025/11/04 4:30 p.m.1 views

ROOT-OS-DEBIAN-13-CVE-2025-9714 CVE-2025-9714 in rootio-libxml2 - Patched by Root

Root has patched CVE-2025-9714 in the rootio-libxml2 package for Root:Debian:13. Multiple fixed versions available...

6.2CVSS6.2AI score0.00012EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/11/03 12:0 a.m.1 views

Ubuntu: Security Advisory (USN-7852-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00192EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.1 views

Astra Linux - уязвимость в libxml2

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when...

6.5CVSS6.6AI score0.0007EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/31 12:0 a.m.1 views

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : libxml2 vulnerability (USN-7852-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7852-1 advisory. It was discovered that libxslt, used by libxml2, incorrectly handled certain attributes. An attacker could use this issue to cause a crash,...

7.8CVSS6.8AI score0.00192EPSS
Exploits1References2
CloudLinux
CloudLinux
added 2025/10/30 9:29 p.m.5 views

libxml2: Fix of 2 CVEs

CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c...

9.8CVSS8.2AI score0.00235EPSS
Exploits0
Ubuntu
Ubuntu
added 2025/10/30 4:39 p.m.3 views

USN-7852-1: libxml2 vulnerability

It was discovered that libxslt, used by libxml2, incorrectly handled certain attributes. An attacker could use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This update adds a fix to libxml2 to mitigate the libxslt vulnerability...

7.8CVSS7AI score0.00192EPSS
Exploits1
OSV
OSV
added 2025/10/30 4:39 p.m.3 views

USN-7852-1 libxml2 vulnerability

It was discovered that libxslt, used by libxml2, incorrectly handled certain attributes. An attacker could use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This update adds a fix to libxml2 to mitigate the libxslt vulnerability...

7.8CVSS6.9AI score0.00192EPSS
Exploits1References2
OSV
OSV
added 2025/10/28 5:52 p.m.2 views

CLSA-2025-1761673925 libxml2: Fix of CVE-2022-49043

CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free...

8.1CVSS7.1AI score0.00222EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/10/27 5:46 p.m.1 views

libxml: Null pointer dereference leads to Denial of service (DoS)

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

7.5CVSS7.1AI score0.00834EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/10/27 5:46 p.m.0 views

libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...

7.5CVSS7.7AI score0.02116EPSS
Exploits1References5
Rows per page
Query Builder