[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9pTvf8KLLaqXaoN_DrayqBszCjXF_93FAONl1W6XlOs":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":101,"topProductsByCves":102,"seoMetadata":107,"meta":116},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":38},36103,"xmlsoft",4,127,0,294,"2025-09-10","x",[16,21,27,33],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},174223,"libxml2",182,99,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},174224,"libxslt",85,25,"2025-07-10",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},174222,"libxml",27,8,"2015-08-14",{"id":34,"product_name":35,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":37},174225,"xmllint",1,"2021-06-01","Xmlsoft is a technology vendor with 4 tracked products and 127 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[40,49,57,63,69,74,80,85,91,96],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":48},"CVE-2004-0110","Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.","2004-03-15",7.5,"v2","High",false,0.24232,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":47,"epssScore":56},"CVE-2017-7376","Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.","2018-02-19",9.8,"v3.0","Critical",0.23694,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":45,"severity":55,"isKev":47,"epssScore":62},"CVE-2008-3529","Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.","2008-09-12",10,0.23373,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":44,"cvssVersion":67,"severity":46,"isKev":47,"epssScore":68},"CVE-2022-40303","An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.","2022-11-23","v3.1",0.22791,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":61,"cvssVersion":45,"severity":55,"isKev":47,"epssScore":73},"CVE-2004-0989","Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.","2005-03-01",0.21686,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":67,"severity":46,"isKev":47,"epssScore":79},"CVE-2021-30560","Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-08-03",8.8,0.21623,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":44,"cvssVersion":54,"severity":46,"isKev":47,"epssScore":84},"CVE-2016-4447","The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.","2016-06-09",0.1398,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":45,"severity":55,"isKev":47,"epssScore":90},"CVE-2011-1944","Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.","2011-09-02",9.3,0.13727,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":95},"CVE-2008-2935","Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as \"an argument in the XSL input.\"","2008-08-01",0.12789,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":47,"epssScore":100},"CVE-2016-4658","xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.","2016-09-25",0.08628,[],[103,104,105,106],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":37},{"title":108,"metaDescription":109,"keywords":110,"structuredData":111},"Xmlsoft - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Xmlsoft covering 4 products with 127 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xmlsoft vulnerabilities, Xmlsoft security, Xmlsoft CVE, Xmlsoft threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":112,"@type":113,"name":114,"description":109,"url":115},"https:\u002F\u002Fschema.org","Organization","Xmlsoft","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fxmlsoft",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":117,"apiVersion":118},"2026-10-28T14:30:02.140Z","3.0"]