CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 24/01/2022 |
| CVE-2022-22827 | 높음8.8 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | 10/01/2022 |
| CVE-2022-22826 | 높음8.8 | nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | 10/01/2022 |
| CVE-2022-22825 | 높음8.8 | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | 10/01/2022 |
| CVE-2022-22824 | 심각9.8 | defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | 10/01/2022 |
| CVE-2022-22823 | 심각9.8 | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | 10/01/2022 |
| CVE-2022-22822 | 심각9.8 | addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | 10/01/2022 |
| CVE-2021-46143 | 높음7.8 | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. | 06/01/2022 |
| CVE-2021-45960 | 높음8.8 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory). | 01/01/2022 |
| CVE-2019-15903 | 높음7.5 | In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | 04/09/2019 |
| CVE-2018-20843 | 높음7.5 | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks). | 24/06/2019 |
| CVE-2017-11742 | 높음7.8 | The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan horse ADVAPI32.DLL in the current working directory because of an untrusted search path, aka DLL hijacking. | 30/07/2017 |
| CVE-2017-9233 | 높음7.5 | XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. | 25/07/2017 |
| CVE-2016-4472 | 높음8.1 | The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716. | 30/06/2016 |
| CVE-2016-5300 | 높음7.5 | The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876. | 16/06/2016 |
| CVE-2012-6702 | 보통5.9 | Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function. | 16/06/2016 |
| CVE-2016-0718 | 심각9.8 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. | 26/05/2016 |