Vendor archive

xml-libxml_project CVEs

Beta · best-effort

2 CVEs tagged to vendor xml-libxml_project — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2017-10672

Published Jun 29, 2017

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2015-3451

Published May 12, 2015

The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via c…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1