Xmlsoft 漏洞

时间轴

类型

Document Processing Software20
Not Defined7

产品

Xmlsoft libxml210
XMLSoft libxml29
XMLSoft libxml4
XMLSoft libxslt3
Xmlsoft Libxml21

修正

Official Fix23
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

易受攻击性

High0
Functional0
Proof-of-Concept8
Unproven10
Not Defined9

访问向量

Not Defined0
Physical0
Local2
Adjacent1
Network24

身份验证

Not Defined0
High0
Low1
None26

用户交互

Not Defined0
Required1
None26

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤51
≤612
≤71
≤88
≤90
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤57
≤66
≤77
≤82
≤92
≤102

VulDB

≤10
≤20
≤30
≤42
≤50
≤612
≤71
≤88
≤90
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤81
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k6
<2k8
<5k13
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k27
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (4): Libxml2 (1), libxml (4), libxml2 (19), libxslt (3)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-08-295.05.0Xmlsoft Libxml2 XML File SAX2.c xmlSAX2StartElement 拒绝服务Document Processing SoftwareNot DefinedNot Defined0.000460.02CVE-2023-39615
2016-03-217.57.2Xmlsoft libxml2 Recover Mode xmlStringGetNodeList 权限升级Document Processing SoftwareUnprovenOfficial Fix0.006690.04CVE-2016-3627
2016-01-276.56.2Xmlsoft libxml2 XML File htmlParseNameComplex 内存损坏Document Processing SoftwareUnprovenOfficial Fix0.007780.03CVE-2016-2073
2015-11-257.36.4Xmlsoft libxml2 Entity Boundary 内存损坏Document Processing SoftwareUnprovenOfficial Fix0.011140.00CVE-2015-7500
2015-11-255.34.6Xmlsoft libxml2 Parser 内存损坏Document Processing SoftwareUnprovenOfficial Fix0.002470.00CVE-2015-7499
2015-11-255.34.6Xmlsoft libxml2 Encoding Conversion 内存损坏Document Processing SoftwareUnprovenOfficial Fix0.017950.00CVE-2015-7498
2015-11-257.36.4Xmlsoft libxml2 xmlDictComputeFastQKey 内存损坏Document Processing SoftwareUnprovenOfficial Fix0.017950.03CVE-2015-7497
2015-11-255.34.6Xmlsoft libxml2 Entity Expansion 拒绝服务Document Processing SoftwareUnprovenOfficial Fix0.006130.02CVE-2015-5312
2015-11-215.95.2Xmlsoft libxml2 XML File xmlParseXMLDecl 内存损坏Document Processing SoftwareUnprovenOfficial Fix0.009550.02CVE-2015-8317
2015-11-024.03.5Xmlsoft libxml2 拒绝服务Document Processing SoftwareUnprovenOfficial Fix0.009700.00CVE-2015-8035

17 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 17 results.

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!