CVSS: 5.3EPSS: 3%CPEs: 17EXPL: 0CVE-2015-1819 – libxml2: denial of service processing a crafted XML document
https://notcve.org/view.php?id=CVE-2015-1819
07 Jul 2015 — The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. Vulnerabilidad en el xmlreader en libxml, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de datos XML manipulados, relacionada con un ataque XML Entity Expansión (XEE). A denial of service flaw was found in the way the libxml2 library parsed certain XML files. An attacker could provide a specially... • http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 1CVE-2013-0340 – Apple Security Advisory 2021-10-26-11
https://notcve.org/view.php?id=CVE-2013-0340
21 Jan 2014 — expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issu... • http://openwall.com/lists/oss-security/2013/02/22/3 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 9.3EPSS: 2%CPEs: 130EXPL: 0CVE-2013-0999 – Webkit.org Webkit string.replace Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2013-0999
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 6%CPEs: 130EXPL: 0CVE-2013-1008 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1008
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 6%CPEs: 130EXPL: 0CVE-2013-1001 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1001
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 6%CPEs: 130EXPL: 0CVE-2013-1002 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1002
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 0%CPEs: 130EXPL: 0CVE-2013-1006 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1006
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 6%CPEs: 130EXPL: 0CVE-2013-1005 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1005
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 6%CPEs: 130EXPL: 0CVE-2013-1010 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1010
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, como es usado en Apple iTunes anterior a v11.0.3 permite a atacantes "man-in-the-middle" ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplica... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 6%CPEs: 130EXPL: 0CVE-2013-1003 – Apple Security Advisory 2013-09-18-2
https://notcve.org/view.php?id=CVE-2013-1003
19 May 2013 — WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicació... • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html • CWE-399: Resource Management Errors •