CVE-2016-3709Medium· 6.1▾ SunlitPossible cross-site scripting vulnerability in libxml after commit 960f0e2.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
1.0% → 1.3%
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
libxml2 >= 2.9.2, < 2.9.11Upgrade past the affected range:
libxml2 2.9.11Connected by shared product, vendor, weakness, or advisory.
CVE-2024-34459High· 7.5An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7
CVE-2023-45322Medium· 6.5libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails
CVE-2023-39615Medium· 6.5Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c
CVE-2023-29469Medium· 6.5An issue was discovered in libxml2 before 2.10.4
CVE-2023-28484Medium· 6.5In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault
CVE-2022-40303High· 7.5An issue was discovered in libxml2 before 2.10.3