CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3410 matches found

CVE•added 2018/03/01 2:00 p.m.•207 views

CVE-2017-12627

CVE-2017-12627 affects Xerces-C XML Parser prior to 3.2.1. Processing external DTD paths can cause a NULL pointer dereference, with potential denial of service and possible remote code execution in vulnerable configurations. Public advisories (Arch Linux ASA-201803-23 and Debian DLA-1328-1) confi...

9.8CVSS9.2AI score0.0829EPSS

SaveExploits3References5Affected Software1

Mend•added 2018/03/01 2:00 p.m.•11 views

CVE-2017-12627

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions...

9.8CVSS0.0829EPSS

SaveExploits3References6

Debian CVE•added 2018/03/01 2:00 p.m.•61 views

CVE-2017-12627

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions...

9.8CVSS3.3AI score0.0829EPSS

SaveExploits3

Cvelist•added 2018/03/01 2:00 p.m.•51 views

CVE-2017-12627

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions...

9.4AI score0.0829EPSS

SaveExploits3References5

Positive Technologies•added 2018/03/01 12:00 a.m.•10 views

PT-2018-2310

Name of the Vulnerable Software and Affected Versions Apache Xerces-C XML Parser library versions prior to 3.2.1 Description The issue is related to the incorrect processing of external DTD paths in the Apache Xerces-C XML Parser library, which can lead to a null pointer dereference under certain...

9.8CVSS0.0829EPSS

SaveExploits3References39

Rapid7 Vulnerability Database (full)•added 2018/03/01 12:00 a.m.•12 views

CVE-2017-12627: NULL Pointer Dereference

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions...

9.8CVSS7.8AI score0.0829EPSS

SaveExploits3References2

NVD•added 2018/02/15 4:29 p.m.•35 views

CVE-2017-15346

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,...

4.7CVSS4.7AI score0.00485EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•30 views

Design/Logic Flaw

4.3CVSS4.7AI score0.00485EPSS

SaveExploits0References1Affected Software7

Prion•added 2018/02/15 4:29 p.m.•29 views

Design/Logic Flaw

4.3CVSS4.7AI score0.00485EPSS

SaveExploits0References1Affected Software7

osv_cve•added 2018/02/15 4:29 p.m.•20 views

CVE-2017-15333

4.7CVSS5.8AI score0.00485EPSS

SaveExploits0References1

NVD•added 2018/02/15 4:29 p.m.•35 views

CVE-2017-15333

4.7CVSS4.7AI score0.00485EPSS

SaveExploits0References1

Cvelist•added 2018/02/15 4:00 p.m.•47 views

CVE-2017-15333

4.7AI score0.00485EPSS

SaveExploits0References1

Cvelist•added 2018/02/15 4:00 p.m.•40 views

CVE-2017-15346

4.6AI score0.00485EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•93 views

CVE-2017-15333

Huawei’s CVE-2017-15333 affects the XML parser in a wide range of Huawei enterprise switches (examples: S12700, S3700, S5700, S6700, S7700, S9700, eCNS210_TD line) across multiple firmware branches (e.g., V200R005C00, V200R009C00, V200R010C00, V100R006C03/05, V200R001C00…V200R010C00, and others)....

4.7CVSS4.7AI score0.00485EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•7 views

CVE-2017-15333: Improper Input Validation

4.7CVSS5.5AI score0.00485EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•8 views

CVE-2017-15346: Improper Input Validation

4.7CVSS5.5AI score0.00485EPSS

SaveExploits0References2

ThreatPost•added 2018/02/06 10:34 a.m.•58 views

Cisco Issues New Patches for Critical Firewall Software Vulnerability

Cisco has released new patches for a critical vulnerability in its Adaptive Security Appliance software after further investigation revealed additional attack vectors. The company first announced the vulnerability, CVE-2018-0101, on Jan. 29. It received a Common Vulnerability Scoring System base...

10CVSS0.9AI score0.8678EPSS

SaveExploits7References4

Cisco•added 2018/01/29 5:00 p.m.•380 views

Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability

Update from February 5, 2018: After further investigation, Cisco has identified additional attack vectors and features that are affected by this vulnerability. In addition, it was also found that the original fix was incomplete so new fixed code versions are now available. Please see the Fixed...

10CVSS9.7AI score0.8678EPSS

SaveExploits7References1

Tenable Nessus•added 2018/01/15 12:00 a.m.•40 views

FreeBSD : shibboleth-sp -- vulnerable to forged user attribute data (3dbe9492-f7b8-11e7-a12d-6cc21735f730)

Shibboleth consortium reports : Shibboleth SP software vulnerable to forged user attribute data The Service Provider software relies on a generic XML parser to process SAML responses and there are limitations in older versions of the parser that make it impossible to fully disable Document Type...

6.5CVSS6.4AI score0.01531EPSS

SaveExploits2References3

FreeBSD•added 2018/01/12 12:00 a.m.•36 views

shibboleth-sp -- vulnerable to forged user attribute data

Shibboleth consortium reports: Shibboleth SP software vulnerable to forged user attribute data The Service Provider software relies on a generic XML parser to process SAML responses and there are limitations in older versions of the parser that make it impossible to fully disable Document Type...

6.5CVSS6.3AI score0.01531EPSS

SaveExploits2References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by