Lucene search
+L

796 matches found

RedhatCVE
RedhatCVE
added 2022/07/19 10:54 p.m.251 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.81039EPSS
SaveExploits2References3
NVD
NVD
added 2022/07/19 6:15 p.m.53 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS0.81039EPSS
SaveExploits2References24
OSV
OSV
added 2022/07/19 6:15 p.m.4 views

DEBIAN-CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7.2AI score0.81039EPSS
SaveExploits2References1
Prion
Prion
added 2022/07/19 6:15 p.m.39 views

Integer overflow

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

5CVSS7.9AI score0.81039EPSS
SaveExploits2References23Affected Software8
OSV
OSV
added 2022/07/19 6:15 p.m.8 views

UBUNTU-CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS6.9AI score0.81039EPSS
SaveExploits2References9
UbuntuCve
UbuntuCve
added 2022/07/19 5:37 p.m.70 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS6.8AI score0.81039EPSS
SaveExploits2References8
Debian CVE
Debian CVE
added 2022/07/19 12:00 a.m.110 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7.2AI score0.81039EPSS
SaveExploits2
Cvelist
Cvelist
added 2022/07/19 12:00 a.m.70 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

8.2AI score0.81039EPSS
SaveExploits2References24
Vulnrichment
Vulnrichment
added 2022/07/19 12:00 a.m.7 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7AI score0.81039EPSS
SaveExploits2References24
CNNVD
CNNVD
added 2022/07/19 12:00 a.m.12 views

Apache Xalan 输入验证错误漏洞

Apache Xalan is an open source software library from the Apache Foundation USA. Apache Xalan Java XSLT Stock in Input Validation Error vulnerability stems from an integer truncation issue when processing malicious XSLT stylesheets. The vulnerability can be exploited to corrupt Java class files...

7.5CVSS5.9AI score0.81039EPSS
SaveExploits2References65
CVE
CVE
added 2022/07/19 12:00 a.m.745 views

CVE-2022-34169

CVE-2022-34169 affects the Apache Xalan Java XSLT library. It describes an integer truncation vulnerability when processing malicious XSLT stylesheets, which can corrupt Java class files generated by the internal XSLTC compiler and allow execution of arbitrary Java bytecode. Public references in ...

7.5CVSS8.2AI score0.81039EPSS
SaveExploits2References24Affected Software1
OSV
OSV
added 2022/07/19 12:00 a.m.56 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score
SaveExploits0References26
AlpineLinux
AlpineLinux
added 2022/07/19 12:00 a.m.107 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS8.4AI score0.81039EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2022/07/04 12:00 a.m.12 views

PT-2022-3956

Name of the Vulnerable Software and Affected Versions Apache Xalan Java XSLT library versions prior to 2.7.3 Description The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generat...

7.8CVSS7.4AI score0.81039EPSS
SaveExploits2References405
OpenVAS
OpenVAS
added 2022/02/13 12:00 a.m.16 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-1102)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/02/13 12:00 a.m.17 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.10 views

Mageia: Security Advisory (MGASA-2021-0123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/12/30 12:00 a.m.34 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2829)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/11/03 12:00 a.m.15 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2649)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00661EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/10/22 11:14 a.m.24 views

CVE-2021-36357

An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...

9.6AI score0.01175EPSS
SaveExploits0References1
Rows per page
Query Builder