Поиск уязвимостей
Количество 13
Количество 13
GHSA-6c2p-rqx3-w4px
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
CVE-2024-40896
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
CVE-2024-40896
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
CVE-2024-40896
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
CVE-2024-40896
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
CVE-2024-40896
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.1 ...
openSUSE-SU-2025:0024-1
Security update for qt6-webengine
ELBA-2025-6597
ELBA-2025-6597: libxml2 bug fix and enhancement update (CRITICAL)
BDU:2024-07164
Уязвимость библиотеки libxml2, связанная с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю получить доступ к произвольным файлам на сервере или выполнить сетевое сканирование внутренней и внешней инфраструктуры
ALT-PU-2024-16574
ALT-PU-2024-16574: package `libxml2` update to version 2.12.9-alt1
ALT-PU-2025-3717
ALT-PU-2025-3717: package `gem-nokogiri` update to version 1.16.7.371-alt0.2
ALT-PU-2024-16632
ALT-PU-2024-16632: package `open-vm-tools` update to version 12.5.0-alt1
ALT-PU-2025-14872
ALT-PU-2025-14872: package `open-vm-tools` update to version 13.0.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
GHSA-6c2p-rqx3-w4px In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.1 ... | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
openSUSE-SU-2025:0024-1 Security update for qt6-webengine | 1% Низкий | почти 2 года назад | ||
ELBA-2025-6597 ELBA-2025-6597: libxml2 bug fix and enhancement update (CRITICAL) | 1% Низкий | больше 1 года назад | ||
BDU:2024-07164 Уязвимость библиотеки libxml2, связанная с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю получить доступ к произвольным файлам на сервере или выполнить сетевое сканирование внутренней и внешней инфраструктуры | CVSS3: 9.1 | 1% Низкий | больше 2 лет назад | |
ALT-PU-2024-16574 ALT-PU-2024-16574: package `libxml2` update to version 2.12.9-alt1 | CVSS3: 9.1 | 1% Низкий | почти 2 года назад | |
ALT-PU-2025-3717 ALT-PU-2025-3717: package `gem-nokogiri` update to version 1.16.7.371-alt0.2 | CVSS3: 9.1 | больше 1 года назад | ||
ALT-PU-2024-16632 ALT-PU-2024-16632: package `open-vm-tools` update to version 12.5.0-alt1 | CVSS3: 9.1 | почти 2 года назад | ||
ALT-PU-2025-14872 ALT-PU-2025-14872: package `open-vm-tools` update to version 13.0.5-alt1 | CVSS3: 9.1 | 12 месяцев назад |
Уязвимостей на страницу