90 matches found
CVE-2022-40157
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
UBUNTU-CVE-2022-40159
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
CVE-2022-41852
Removed by vendor...
CVE-2022-40161
Removed by vendor...
CVE-2022-40158
Removed by vendor...
CVE-2022-40157
Removed by vendor...
PT-2022-25253 · Jxpath · Jxpath
Name of the Vulnerable Software and Affected Versions: JXPath affected versions not specified Description: The issue concerns a potential Denial of Service DOS attack when using JXPath to interpret XPath. If the parser processes user-supplied input, an attacker could provide content that causes t...
CVE-2022-40159
CVE-2022-40159 concerns a DoS due to a stack-based buffer overflow in parsing XPath by JXPath. The CVE entry is explicitly marked as DISPUTED/invalid in multiple sources (NVD OSV/GHSA withdrawals), and no confirmatory public technical details are provided beyond the described overflow. IBM bullet...
PT-2022-25252 · Jxpath · Jxpath
Name of the Vulnerable Software and Affected Versions: JXPath affected versions not specified Description: The issue allows for Denial of Service attacks. If the parser is running on user-supplied input, an attacker may supply content that causes the parser to crash by stackoverflow, potentially...
编号撤回
Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation, U.S.A. A buffer overflow vulnerability exists in Apache Commons JXPath, which is caused by a stack buffer overflow when parsing XPath. A remote attacker could exploit this vulnerability to cause a denial...
CVE-2022-40160
CVE-2022-40160 describes a Denial of Service in JXPath due to a stack-based buffer overflow while parsing XPath. Connected IBM bulletins note this affects IBM Content Navigator components (JXPath package) and provide remediation: upgrade to IBM Content Navigator 3.0.12 IF004 or 3.0.11 IF008 plus ...
CVE-2022-40160 Stack Overflow in JXPath
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
Apache Commons JXPath 缓冲区错误漏洞
Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation. Apache Commons JXPath suffers from a buffer error vulnerability that stems from a parser running on user-supplied input that allows an attacker to submit special data resulting in a denial of service due...
编号撤回
Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation in the U.S. A buffer overflow vulnerability exists in Apache Commons JXPath, which stems from a parser running on user-supplied input allowing an attacker to submit special data causing a stack overflow t...
PT-2022-5014 · Apache · Apache Commons Jxpath
Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified GeoServer versions prior to 2.23.6, 2.24.4, and 2.25.2 hermes-management versions prior to 2.2.9 Description: The issue is related to the application of external input for class selection ...
CVE-2022-40159
Removed by vendor...
编号撤回
Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation. Apache Commons JXPath suffers from a buffer overflow vulnerability that can be exploited by remote attackers to cause a denial of service...
PT-2022-25255 · Apache · Jxpath
Name of the Vulnerable Software and Affected Versions: JXPath affected versions not specified Description: The issue allows for Denial of Service attacks if the parser is running on user-supplied input. An attacker may supply content that causes the parser to crash by stackoverflow, potentially...
Apache Commons JXPath 缓冲区错误漏洞
Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation, U.S.A. A buffer overflow vulnerability exists in Apache Commons JXPath, which is caused by a stack buffer overflow when parsing XPath. A remote attacker could exploit this vulnerability to cause a denial...
CVE-2022-40159 Stack Overflow in JXPath
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...