Login Request a demo
XE
Product
Xerces-c++
by Apache · last CVE Feb 29, 2024
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 3High 4Medium 0Low 0
Severity
All severities11Critical3High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Xerces-c++ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-37536
8.8
2%
Oct 11
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request
Affected: 3.2.3
CVE-2018-1311
8.1
10%
Dec 18
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs
Affected: 3.0.0 before 3.2.5
CVE-2012-0880
7.5
4%
Aug 8
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions
Affected: All versions, or not specified
CVE-2016-4463
7.5
14%
Jul 8
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD
Affected: through 3.1.3
Showing 4