Known vulnerabilities in Apache Xerces C++ - page 2

Vendor: Apache Foundation
Software: Apache Xerces C++
Software CPE: cpe:2.3:a:apache_foundation:xerces-c_plus_plus:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Xerces C++ Apache Xerces C++ is affected by 36 known vulnerabilities: 6 high, 19 medium, 11 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32135 - Resource Management Errors
CVE-2016-8910		 CWE-399 Low
No
No
 - 04.11.2016 SB2016110408
SB2017041815
SB2016103001
and 2 more
#VU32134 - Improper input validation
CVE-2016-8909		 CWE-20 Medium
No
No
 - 04.11.2016 SB2016110407
SB2017041814
#VU32133 - Out-of-bounds read
CVE-2016-8668		 CWE-125 Low
No
No
 - 04.11.2016 SB2016110406
SB2017041813
#VU32132 - NULL Pointer Dereference
CVE-2016-8578		 CWE-476 Medium
No
No
 - 04.11.2016 SB2016110405
SB2017041812
SB2016103001
and 2 more
#VU32131 - Missing release of memory after effective lifetime
CVE-2016-8577		 CWE-401 Medium
No
No
 - 04.11.2016 SB2016110404
SB2017041811
SB2016103001
and 2 more
#VU32130 - Resource Management Errors
CVE-2016-8576		 CWE-399 Low
No
No
 - 04.11.2016 SB2016110403
SB2017041810
SB2016103001
and 2 more
#VU83 - Memory corruption
CVE-2016-4463		 CWE-119 Low
No
No
 - 04.07.2016 SB2016070401
SB2017082310
SB2016070504
and 7 more
#VU32330 - Improper Access Control
CVE-2015-8550		 CWE-284 Low
Available
No
 - 14.04.2016 SB2016041401
SB2016022411
SB2016022412
and 1 more
#VU32432 - Resource Management Errors
CVE-2015-1779		 CWE-399 High
No
No
 - 12.01.2016 SB2016011208
SB2015051805
SB2015051312
and 3 more
#VU32393 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5165		 CWE-200 Medium
No
No
 - 12.08.2015 SB2015081204
SB2015082107
SB2015100610
and 12 more
#VU32399 - Heap-based Buffer Overflow
CVE-2015-5154		 CWE-122 High
No
No
 - 12.08.2015 SB2015081205
SB2015090103
SB2015083101
and 19 more
#VU32423 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3615		 CWE-200 Low
No
No
 - 02.11.2014 SB2014110201
SB2014080401
SB2015032703
and 1 more
#VU32487 - Memory corruption
CVE-2014-5263		 CWE-119 Medium
No
No
 - 26.08.2014 SB2014082601
SB2014102103
#VU32536 - Heap-based Buffer Overflow
CVE-2014-0150		 CWE-122 Low
No
No
 - 18.04.2014 SB2014041803
SB2014052106
SB2014111811
and 2 more
#VU32665 - Permissions, Privileges, and Access Controls
CVE-2013-2007		 CWE-264 Low
No
No
 - 21.05.2013 SB2013052101
SB2013060403
#VU32713 - Memory corruption
CVE-2012-6075		 CWE-119 High
No
No
 - 13.02.2013 SB2013021302
SB2013011808
SB2013011809
and 1 more


Showing elements 21 - 40 out of 36