Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xml security library vulnerabilities and exploits

(subscribe to this query)
5.1
CVSSv2
CVE-2011-1425
xslt.c in XML Security Library (aka xmlsec) prior to 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote malicious users to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signa...
Aleksey Xml Security LibraryAleksey Xml Security Library 1.2.7Aleksey Xml Security Library 1.2.6Aleksey Xml Security Library 1.1.2Aleksey Xml Security Library 1.1.1Aleksey Xml Security Library 1.0.0Aleksey Xml Security Library 0.1.1Aleksey Xml Security Library 0.0.9Aleksey Xml Security Library 0.0.8Aleksey Xml Security Library 0.0.2Aleksey Xml Security Library 0.0.1Aleksey Xml Security Library 1.2.13Aleksey Xml Security Library 1.2.11Aleksey Xml Security Library 1.2.10Aleksey Xml Security Library 1.2.3Aleksey Xml Security Library 1.2.2Aleksey Xml Security Library 1.0.3Aleksey Xml Security Library 1.0.2Aleksey Xml Security Library 0.0.13Aleksey Xml Security Library 0.0.12Aleksey Xml Security Library 0.0.5Aleksey Xml Security Library 0.0.4
4.3
CVSSv2
CVE-2013-2153
The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) prior to 1.7.1 allows context-dependent malicious users to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signat...
Apache Xml Security For C\\+\\+ 1.6.0Apache Xml Security For C\\+\\+ 1.1.0Apache Xml Security For C\\+\\+ 1.6.1Apache Xml Security For C\\+\\+ 1.2.1Apache Xml Security For C\\+\\+ 1.5.1Apache Xml Security For C\\+\\+ 1.5.0Apache Xml Security For C\\+\\+ 0.2.0Apache Xml Security For C\\+\\+ 1.3.0Apache Xml Security For C\\+\\+Apache Xml Security For C\\+\\+ 1.4.0Apache Xml Security For C\\+\\+ 1.3.1Apache Xml Security For C\\+\\+ 1.2.0Apache Xml Security For C\\+\\+ 0.1.0
5.8
CVSSv2
CVE-2013-2155
Apache Santuario XML Security for C++ (aka xml-security-c) prior to 1.7.1 does not properly validate length values, which allows remote malicious users to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to...
Apache Xml Security For C\\+\\+ 1.6.0Apache Xml Security For C\\+\\+ 1.1.0Apache Xml Security For C\\+\\+ 1.6.1Apache Xml Security For C\\+\\+ 1.2.1Apache Xml Security For C\\+\\+ 1.5.1Apache Xml Security For C\\+\\+ 1.5.0Apache Xml Security For C\\+\\+ 0.2.0Apache Xml Security For C\\+\\+ 1.3.0Apache Xml Security For C\\+\\+Apache Xml Security For C\\+\\+ 1.4.0Apache Xml Security For C\\+\\+ 1.3.1Apache Xml Security For C\\+\\+ 1.2.0Apache Xml Security For C\\+\\+ 0.1.0
7.5
CVSSv2
CVE-2013-2156
Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) prior to 1.7.1 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitr...
Apache Xml Security For C\\+\\+ 1.6.0Apache Xml Security For C\\+\\+ 1.1.0Apache Xml Security For C\\+\\+ 1.6.1Apache Xml Security For C\\+\\+ 1.2.1Apache Xml Security For C\\+\\+ 1.5.1Apache Xml Security For C\\+\\+ 1.5.0Apache Xml Security For C\\+\\+ 0.2.0Apache Xml Security For C\\+\\+ 1.3.0Apache Xml Security For C\\+\\+Apache Xml Security For C\\+\\+ 1.4.0Apache Xml Security For C\\+\\+ 1.3.1Apache Xml Security For C\\+\\+ 1.2.0Apache Xml Security For C\\+\\+ 0.1.0
7.5
CVSSv2
CVE-2013-2154
Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) prior to 1.7.1 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute a...
Apache Xml Security For C\\+\\+ 1.6.0Apache Xml Security For C\\+\\+ 1.1.0Apache Xml Security For C\\+\\+ 1.6.1Apache Xml Security For C\\+\\+ 1.2.1Apache Xml Security For C\\+\\+ 1.5.1Apache Xml Security For C\\+\\+ 1.5.0Apache Xml Security For C\\+\\+ 0.2.0Apache Xml Security For C\\+\\+ 1.3.0Apache Xml Security For C\\+\\+Apache Xml Security For C\\+\\+ 1.4.0Apache Xml Security For C\\+\\+ 1.3.1Apache Xml Security For C\\+\\+ 1.2.0Apache Xml Security For C\\+\\+ 0.1.0
NA
CVE-2023-49087
xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree (th...
Simplesamlphp Saml2 5.0.0Simplesamlphp Xml-security 1.6.11
7.5
CVSSv2
CVE-2017-10672
Use-after-free in the XML-LibXML module up to and including 2.0129 for Perl allows remote malicious users to execute arbitrary code by controlling the arguments to a replaceChild call.
Xml-libxml Project Xml-libxmlDebian Debian Linux 8.0Debian Debian Linux 9.0
7.5
CVSSv2
CVE-2019-17570
An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maint...
Apache Xml-rpc 3.1.3Apache Xml-rpc 3.1.2Apache Xml-rpc 3.1Apache Xml-rpc 3.1.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Fedoraproject Fedora 31Fedoraproject Fedora 32Redhat Software Collections 1.0
7.5
CVSSv2
CVE-2005-1921
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and previous versions (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and previous versions, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6)...
Php Xml RpcGggeek PhpxmlrpcDrupal DrupalTiki Tikiwiki Cms\\/groupwareDebian Debian Linux 3.1
5.8
CVSSv2
CVE-2017-18926
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
Librdf Raptor Rdf Syntax Library 2.0.15Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook