The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-10:01 advisory.

    This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML     files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse     time or later once the document has been modified. The output can be a simple SAX stream or and in-memory     DOM like representations. In this case one can use the built-in XPath and XPointer implementation to     select subnodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP     modules and combined to an URI library.
    Security issues fixed with this release:
    CVE-2010-4008     libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and     other products, reads from invalid memory locations during processing of malformed XPath expressions,     which allows context-dependent attackers to cause a denial of service (application crash) via a crafted     XML document.
    CVE-2010-4494     Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215     and other products, allows remote attackers to cause a denial of service or possibly have unspecified     other impact via vectors related to XPath handling.
    CVE-2011-0216     Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code     or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
    CVE-2011-1944     Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and     earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute     arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new     namespace node, related to handling of XPath expressions.
    CVE-2011-2821     Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote     attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath     expression.
    CVE-2011-2834     Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote     attackers to cause a denial of service or possibly have unspecified other impact via vectors related to     XPath handling.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote host is earlier than 14.0.835.163 and is affected by multiple vulnerabilities:

  - A race condition exists related to the certificate     cache. (Issue #49377)

  - The Windows Media Player plugin allows click-free     access to the system Flash. (Issue #51464)

  - MIME types are not treated authoritatively at plugin     load time. (Issue #75070)

  - An unspecified error allows V8 script object wrappers     to crash. (Issue #76771)

  - The included PDF functionality contains a garbage     collection error. (Issue #78639)

  - Out-of-bounds read issues exist related to media     buffers, mp3 files, box handling, Khmer characters,     video handling, Tibetan characters, and triangle     arrays. (Issues #82438, #85041, #89991, #90134, #90173,     #95563, #95625)

  - An unspecified error allows data displayed in the URL     to be spoofed. (Issue #83031)

  - Use-after-free errors exist related to unload event     handling, the document loader, plugin handling, ruby,     table style handling, and the focus controller.
    (Issues #89219, #89330, #91197, #92651, #94800, #93420,     #93587)

  - The URL bar can be spoofed in an unspecified manner     related to the forward button. (Issue #89564)

  - An NULL pointer error exists related to WebSockets.
    (Issue #89795)

  - An off-by-one error exists related to the V8 JavaScript     engine. (Issue #91120)

  - A stale node error exists related to CSS stylesheet     handling. (Issue #92959)

  - A cross-origin bypass error exists related to the V8     JavaScript engine. (Issue #93416)

  - A double-free error exists related to XPath handling     in libxml. (Issue #93472)

  - Incorrect permissions are assigned to non-gallery     pages. (Issue #93497)

  - An improper string read occurs in the included PDF     functionality. (Issue #93596)

  - An unspecified error allows unintended access to     objects built in to the V8 JavaScript engine.
    (Issue #93906)

  - Self-signed certificates are not pinned properly.
    (Issue #95917)

  - A variable-type confusion issue exists in the V8     JavaScript engine related to object sealing.
    (Issue #95920)

The libxml2 library is a development toolbox providing the implementation of various XML standards. One of those standards is the XML Path Language (XPath), which is a language for addressing parts of an XML document.

A heap-based buffer overflow flaw was found in the way libxml2 decoded entity references with long names. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3919)

An off-by-one error, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XML files. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-0216)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2011-1944)

Flaws were found in the way libxml2 parsed certain XPath expressions.
If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash. (CVE-2010-4008, CVE-2011-2834)

An out-of-bounds memory read flaw was found in libxml2. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. (CVE-2011-3905)

Note: Scientific Linux does not ship any applications that use libxml2 in a way that would allow the CVE-2011-1944, CVE-2010-4008, and CVE-2011-2834 flaws to be exploited; however, third-party applications may allow XPath expressions to be passed which could trigger these flaws.

All users of libxml2 are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0217 advisory.

    - Added patch for CVE-2012-0841
    - Added patch for CVE-2011-0216
    - Added patch for CVE-2011-2834
    - Added patch for CVE-2011-3919
    - Added patch for CVE-2011-1944

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Double free vulnerabilities in libxml2 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression and via vectors related to XPath handling (CVE-2011-2821, CVE-2011-2834).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been patched to correct these issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1749 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards. One of those standards is the XML Path Language     (XPath), which is a language for addressing parts of an XML document.

    An off-by-one error, leading to a heap-based buffer overflow, was found in     the way libxml2 parsed certain XML files. A remote attacker could provide     a specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-0216)

    An integer overflow flaw, leading to a heap-based buffer overflow, was     found in the way libxml2 parsed certain XPath expressions. If an attacker     were able to supply a specially-crafted XML file to an application using     libxml2, as well as an XPath expression for that application to run against     the crafted file, it could cause the application to crash or, possibly,     execute arbitrary code. (CVE-2011-1944)

    Multiple flaws were found in the way libxml2 parsed certain XPath     expressions. If an attacker were able to supply a specially-crafted XML     file to an application using libxml2, as well as an XPath expression for     that application to run against the crafted file, it could cause the     application to crash. (CVE-2010-4008, CVE-2010-4494, CVE-2011-2821,     CVE-2011-2834)

    Note: Red Hat does not ship any applications that use libxml2 in a way that     would allow the CVE-2011-1944, CVE-2010-4008, CVE-2010-4494, CVE-2011-2821,     and CVE-2011-2834 flaws to be exploited; however, third-party applications     may allow XPath expressions to be passed which could trigger these flaws.

    Red Hat would like to thank the Google Security Team for reporting the     CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the     original reporter of CVE-2010-4008.

    This update also fixes the following bugs:

    * A number of patches have been applied to harden the XPath processing code     in libxml2, such as fixing memory leaks, rounding errors, XPath numbers     evaluations, and a potential error in encoding conversion. (BZ#732335)

    All users of libxml2 are advised to upgrade to these updated packages,     which contain backported patches to correct these issues. The desktop must     be restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards. One of those standards is the XML Path Language (XPath), which is a language for addressing parts of an XML document.

A heap-based buffer overflow flaw was found in the way libxml2 decoded entity references with long names. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3919)

An off-by-one error, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XML files. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-0216)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2011-1944)

Flaws were found in the way libxml2 parsed certain XPath expressions.
If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash. (CVE-2010-4008, CVE-2011-2834)

An out-of-bounds memory read flaw was found in libxml2. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. (CVE-2011-3905)

Note: Red Hat does not ship any applications that use libxml2 in a way that would allow the CVE-2011-1944, CVE-2010-4008, and CVE-2011-2834 flaws to be exploited; however, third-party applications may allow XPath expressions to be passed which could trigger these flaws.

Red Hat would like to thank the Google Security Team for reporting the CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the original reporter of CVE-2010-4008.

All users of libxml2 are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0016 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards. One of those standards is the XML Path Language     (XPath), which is a language for addressing parts of an XML document.

    A heap-based buffer overflow flaw was found in the way libxml2 decoded     entity references with long names. A remote attacker could provide a     specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-3919)

    An off-by-one error, leading to a heap-based buffer overflow, was found in     the way libxml2 parsed certain XML files. A remote attacker could provide a     specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-0216)

    A flaw was found in the way libxml2 parsed certain XPath expressions. If an     attacker were able to supply a specially-crafted XML file to an application     using libxml2, as well as an XPath expression for that application to run     against the crafted file, it could cause the application to crash.
    (CVE-2011-2834)

    Note: Red Hat does not ship any applications that use libxml2 in a way that     would allow the CVE-2011-2834 flaw to be exploited; however, third-party     applications may allow XPath expressions to be passed which could trigger     this flaw.

    An out-of-bounds memory read flaw was found in libxml2. A remote attacker     could provide a specially-crafted XML file that, when opened in an     application linked against libxml2, would cause the application to crash.
    (CVE-2011-3905)

    All users of libxml2 are advised to upgrade to these updated packages,     which contain backported patches to correct these issues. The desktop must     be restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-002 applied. This update contains multiple security-related fixes for the following components :

  - curl
  - Directory Service
  - ImageIO
  - libarchive
  - libsecurity
  - libxml
  - Quartz Composer
  - QuickTime
  - Ruby
  - Samba
  - Security Framework

a. ESXi update to third-party component libxml2

   The libxml2 third-party library has been updated which addresses    multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-4008, CVE-2011-0216, CVE-2011-1944,    CVE-2011-2834, CVE-2011-3905, CVE-2011-3919 and CVE-2012-0841 to    these issues.

Lot of security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IMPORTANT NOTE: The mingw32 packages in Scientific Linux 6 will no longer be updated proactively and will be deprecated with the release of Scientific Linux 6.4. These packages were provided to support other capabilities in Scientific Linux and were not intended for direct use.
You are advised to not use these packages with immediate effect.

A heap-based buffer overflow flaw was found in the way libxml2 decoded entity references with long names. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3919)

A heap-based buffer underflow flaw was found in the way libxml2 decoded certain entities. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2012-5134)

It was found that the hashing routine used by libxml2 arrays was susceptible to predictable hash collisions. Sending a specially crafted message to an XML service could result in longer processing time, which could lead to a denial of service. To mitigate this issue, randomization has been added to the hashing function to reduce the chance of an attacker successfully causing intentional collisions.
(CVE-2012-0841)

Multiple flaws were found in the way libxml2 parsed certain XPath (XML Path Language) expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash. (CVE-2010-4008, CVE-2010-4494, CVE-2011-2821, CVE-2011-2834)

Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-0216, CVE-2011-3102)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2011-1944)

An out-of-bounds memory read flaw was found in libxml2. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. (CVE-2011-3905)

Specially crafted XPath expressions could allow attackers to cause a denial of service or possibly have unspecified other impact (CVE-2011-2821,CVE-2011-2834).

The mobile device is running a version of iOS that is older than version 6.0.  Version 6.0 contains numerous security-related fixes for the following vulnerabilities :

  - Numerous memory errors exist related to handling     'TIFF', 'PNG' and 'JPEG' images and 'ImageIO' that could     allow arbitrary code execution. (CVE-2011-1167,     CVE-2011-3026, CVE-2011-3048, CVE-2011-3328,     CVE-2012-1173, CVE-2012-3726)

  - Several issues exist related to 'CoreGraphics' and     'FreeType' (CVE-2012-1126, CVE-2012-1127, CVE-2012-1128,     CVE-2012-1129, CVE-2012-1130, CVE-2012-1131,     CVE-2012-1132, CVE-2012-1133, CVE-2012-1134,     CVE-2012-1135, CVE-2012-1136, CVE-2012-1137,     CVE-2012-1138, CVE-2012-1139, CVE-2012-1140,     CVE-2012-1141, CVE-2012-1142, CVE-2012-1143,     CVE-2012-1144)

  - Numerous issues exist related to libxml and could lead     to application crashes or arbitrary code execution.
    (CVE-2011-1944, CVE-2011-2821, CVE-2011-2834,     CVE-2011-3919)

  - A stack-based buffer overflow exists related to 'locale     ID' and 'International Components for Unicode' (ICU).
    (CVE-2011-4599)

  - An unitialized memory access issue exists related to     'Sorenson' encoded movie files and 'CoreMedia'.
    (CVE-2012-3722)

  - An URL handling issue exists related to 'CFNetwork'     that can disclose sensitive information. (CVE-2012-3724)

  - The 'DNAv4' protocol discloses sensitive information     when connecting to unencrypted WiFi networks.
    (CVE-2012-3725)

  - A buffer overflow error exists related to 'IPSec' and     'racoon' configuration files. (CVE-2012-3727)

  - An invalid pointer dereference error exists related to     the kernel and packet filter ioctls. (CVE-2012-3728)

  - An uninitialized memory access error exists related to     the kernel and the Berkeley Packet Filter interpreter.
    (CVE-2012-3729)

  - Several issues exist related to 'Mail' and the handling     of attachments and 'S/MIME' signed messages.
    (CVE-2012-3730, CVE-2012-3731, CVE-2012-3732)

  - Information disclosure issues exist related to     'Messages', 'Office Viewer', system logs, and 'UIKit'.
    (CVE-2012-3733, CVE-2012-3734, CVE-2012-3743,     CVE-2012-3746)

  - Memory corruption errors exist related to 'OpenGL'.
    (CVE-2011-3457)

  - Numerous errors exist related to 'Passcode Lock'.
    (CVE-2012-3735, CVE-2012-3736, CVE-2012-3737,     CVE-2012-3738, CVE-2012-3739, CVE-2012-3740)

  - An error exists in 'Restrictions' that could allow     unauthorized purchases. (CVE-2012-3741)

  - Errors exist in 'Safari' that are related to misleading     URL characters and password auto complete.
    (CVE-2012-3742, CVE-2012-0680)

  - A buffer overflow error exists related to 'Telephony'     and SMS handling. (CVE-2012-3745)

  - Many errors exist related to the bundled 'WebKit'     components. (CVE-2011-2845, CVE-2011-3016,     CVE-2011-3021, CVE-2011-3027, CVE-2011-3032,     CVE-2011-3034, CVE-2011-3035, CVE-2011-3036,     CVE-2011-3037, CVE-2011-3038, CVE-2011-3039,     CVE-2011-3040, CVE-2011-3041, CVE-2011-3042,     CVE-2011-3043, CVE-2011-3044, CVE-2011-3050,     CVE-2011-3053, CVE-2011-3059, CVE-2011-3060,     CVE-2011-3064, CVE-2011-3067, CVE-2011-3068,     CVE-2011-3069, CVE-2011-3071, CVE-2011-3073,     CVE-2011-3074, CVE-2011-3075, CVE-2011-3076,     CVE-2011-3078, CVE-2011-3081, CVE-2011-3086,     CVE-2011-3089, CVE-2011-3090, CVE-2011-3105,     CVE-2011-3913, CVE-2011-3924, CVE-2011-3926,     CVE-2011-3958, CVE-2011-3966, CVE-2011-3968,     CVE-2011-3969, CVE-2011-3971, CVE-2012-0682,     CVE-2012-0683, CVE-2012-1520, CVE-2012-1521,     CVE-2012-2815, CVE-2012-2818, CVE-2012-3589,     CVE-2012-3590, CVE-2012-3591, CVE-2012-3592,     CVE-2012-3593, CVE-2012-3594, CVE-2012-3595,     CVE-2012-3596, CVE-2012-3597, CVE-2012-3598,     CVE-2012-3599, CVE-2012-3600, CVE-2012-3601,     CVE-2012-3602, CVE-2012-3603, CVE-2012-3604,     CVE-2012-3605, CVE-2012-3608, CVE-2012-3609,     CVE-2012-3610, CVE-2012-3611, CVE-2012-3612,     CVE-2012-3613, CVE-2012-3614, CVE-2012-3615,     CVE-2012-3617, CVE-2012-3618, CVE-2012-3620,     CVE-2012-3624, CVE-2012-3625, CVE-2012-3626,     CVE-2012-3627, CVE-2012-3628, CVE-2012-3629,     CVE-2012-3630, CVE-2012-3631, CVE-2012-3633,     CVE-2012-3634, CVE-2012-3635, CVE-2012-3636,     CVE-2012-3637, CVE-2012-3638, CVE-2012-3639,     CVE-2012-3640, CVE-2012-3641, CVE-2012-3642,     CVE-2012-3644, CVE-2012-3645, CVE-2012-3646,     CVE-2012-3647, CVE-2012-3648, CVE-2012-3650,     CVE-2012-3651, CVE-2012-3652, CVE-2012-3653,     CVE-2012-3655, CVE-2012-3656, CVE-2012-3658,     CVE-2012-3659, CVE-2012-3660, CVE-2012-3661,     CVE-2012-3663, CVE-2012-3664, CVE-2012-3665,     CVE-2012-3666, CVE-2012-3667, CVE-2012-3668,     CVE-2012-3669, CVE-2012-3670, CVE-2012-3671,     CVE-2012-3672, CVE-2012-3673, CVE-2012-3674,     CVE-2012-3676, CVE-2012-3677, CVE-2012-3678,     CVE-2012-3679, CVE-2012-3680, CVE-2012-3681,     CVE-2012-3682, CVE-2012-3683, CVE-2012-3684,     CVE-2012-3686, CVE-2012-3691, CVE-2012-3693,     CVE-2012-3695, CVE-2012-3696, CVE-2012-3703,     CVE-2012-3704, CVE-2012-3706, CVE-2012-3708,     CVE-2012-3710, CVE-2012-3747)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284198	MiracleLinux 4 : libxml2-2.7.6-4.0.1.AXS4 (AXSA:2012-10:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	2010/12/8	2021/1/6	critical
56230	Google Chrome < 14.0.835.163 Multiple Vulnerabilities	Nessus	Windows	2011/9/19	2022/4/11	high
61217	Scientific Linux Security Update : libxml2 on SL5.x i386/x86_64 (20120111)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
68721	Oracle Linux 6 : mingw32-libxml2 (ELSA-2013-0217)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
56429	Mandriva Linux Security Advisory : libxml2 (MDVSA-2011:145)	Nessus	Mandriva Local Security Checks	2011/10/10	2021/1/6	high
57022	RHEL 6 : libxml2 (RHSA-2011:1749)	Nessus	Red Hat Local Security Checks	2011/12/6	2025/4/14	critical
57487	CentOS 5 : libxml2 (CESA-2012:0017)	Nessus	CentOS Local Security Checks	2012/1/12	2021/1/4	high
57491	RHEL 4 : libxml2 (RHSA-2012:0016)	Nessus	Red Hat Local Security Checks	2012/1/12	2024/11/4	critical
59067	Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)	Nessus	MacOS X Local Security Checks	2012/5/10	2024/5/28	critical
59966	VMSA-2012-0012 : VMware ESXi update to third-party library	Nessus	VMware ESX Local Security Checks	2012/7/13	2021/1/6	high
62323	Fedora 17 : libxml2-2.7.8-9.fc17 (2012-13820)	Nessus	Fedora Local Security Checks	2012/9/27	2021/1/11	high
64425	Scientific Linux Security Update : mingw32-libxml2 on SL6.x (x86_64) (20130131)	Nessus	Scientific Linux Local Security Checks	2013/2/4	2021/1/14	high
75936	openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
62242	Apple iOS < 6.0 Multiple Vulnerabilities	Nessus	Mobile Devices	2012/9/24	2026/3/23	critical

检测

插件搜索

critical

critical

high

high

critical

high

critical

high

critical

critical

high

high

high

high

critical