Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

277 result(s)

Export this search: RSS · CSV · STIX

CVE-2018-14567 Medium · 6.5 CWE-835 Aug 16, 2018

Infinite Loop in Xmlsoft Libxml2

libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.

CVE-2017-16932 High · 7.5 CWE-835 Nov 23, 2017

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.