Libxml2

Every one of the 84 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow.…CVE-2022-40303Xmlsoft · CVSS 7.5 · 41% likely

   CWE-190

2. Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or e…CVE-2008-3529Xmlsoft · 23% likely

   CWE-119

3. Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.CVE-2017-7376Xmlsoft · 23% likely

   CWE-119

4. There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-aft…CVE-2021-3518Xmlsoft · 22% likely

   CWE-416

5. There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application l…CVE-2021-3517Xmlsoft · CVSS 8.6 · 17% likely

   CWE-787

6. The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application c…CVE-2016-4447Xmlsoft · 14% likely

   CWE-1191 bounty report

7. Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service…CVE-2011-1944Xmlsoft · 13% likely

   CWE-189

8. libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consu…CVE-2008-4409Xmlsoft · 8.5% likely

   CWE-399

9. xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.CVE-2020-7595Xmlsoft · CVSS 7.5 · 7.8% likely

   CWE-835

10. Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vect…CVE-2015-7498Xmlsoft · 7.2% likely

    CWE-119

11. Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified…CVE-2015-7497Xmlsoft · 7.2% likely

    CWE-119

12. Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.CVE-2016-4448Xmlsoft · 7.0% likely

    CWE-134

13. The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite rec…CVE-2016-3627Xmlsoft · CVSS 7.5 · 7.0% likely

    CWE-674

14. parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.CVE-2017-16932Xmlsoft · CVSS 7.5 · 6.5% likely

    CWE-8351 bounty report

15. Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspec…CVE-2015-7499Xmlsoft · 6.4% likely

    CWE-119

16. The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.CVE-2016-1762Xmlsoft · CVSS 8.1 · 6.1% likely

    CWE-1221 bounty report

17. The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a…CVE-2016-4483Xmlsoft · 6.0% likely

    CWE-502

18. The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors rel…CVE-2015-7500Xmlsoft · 5.9% likely

    CWE-119

19. The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) i…CVE-2015-8317Xmlsoft · 5.9% likely

    CWE-119

20. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case,…CVE-2022-40304Xmlsoft · CVSS 7.8 · 5.8% likely

    CWE-415

21. xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.CVE-2019-19956Xmlsoft · CVSS 7.5 · 5.6% likely

    CWE-772

22. The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and…CVE-2015-8241Xmlsoft · 5.4% likely

    CWE-119

23. valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Xmlsoft · CVSS 7.5 · 5.1% likely

    CWE-416

24. The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-depende…CVE-2016-3705Xmlsoft · 5.1% likely

    CWE-20

25. dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOC…CVE-2015-8806Xmlsoft · 5.0% likely
26. The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and applicat…CVE-2015-8710Xmlsoft · 4.9% likely

    CWE-119

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.