[{"CVE":"CVE-2018-1311","severity":"important","public_date":"2019-12-16T00:00:00Z","advisories":["RHSA-2020:0702","RHSA-2020:0704"],"bugzilla":"1788472","bugzilla_description":"CVE-2018-1311 xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["xerces-c-0:3.1.1-10.el7_7","xerces-c-0:3.0.1-21.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1311.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12627","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":[],"bugzilla":"1551525","bugzilla_description":"CVE-2017-12627 xerces-c: Null pointer dereference while processing the path to DTD allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4463","severity":"moderate","public_date":"2016-06-29T00:00:00Z","advisories":["RHSA-2018:3506","RHSA-2018:3514","RHSA-2018:3335"],"bugzilla":"1348845","bugzilla_description":"CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["xerces-c-0:3.1.1-8.el7_4.1","xerces-c-0:3.1.1-8.el7_5.1","xerces-c-0:3.1.1-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4463.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-2099","severity":"moderate","public_date":"2016-05-09T00:00:00Z","advisories":[],"bugzilla":"1310699","bugzilla_description":"CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2099.json"},{"CVE":"CVE-2016-0729","severity":"important","public_date":"2016-02-25T00:00:00Z","advisories":["RHSA-2016:0430"],"bugzilla":"1312231","bugzilla_description":"CVE-2016-0729 xerces-c: parser crashes on malformed input","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["xerces-c-0:3.1.1-8.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0729.json"},{"CVE":"CVE-2015-0252","severity":"moderate","public_date":"2015-03-20T00:00:00Z","advisories":["RHSA-2015:1193"],"bugzilla":"1199103","bugzilla_description":"CVE-2015-0252 xerces-c: crashes on malformed input","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["xerces-c-0:3.1.1-7.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0252.json"},{"CVE":"CVE-2012-0880","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":[],"bugzilla":"787103","bugzilla_description":"CVE-2012-0880 xml: xerces-c hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0880.json"},{"CVE":"CVE-2009-1885","severity":"low","public_date":"2009-08-05T00:00:00Z","advisories":[],"bugzilla":"515515","bugzilla_description":"CVE-2009-1885 xerces-c, xerces-c27: Stack overflow when parsing recursive XML structures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1885.json"}]