Lucene search
+L

8320 matches found

osv_ghsa
osv_ghsa
•added 2022/07/06 12:00 a.m.•26 views

GHSA-WRXV-2J5Q-M38W lxml NULL Pointer Dereference allows attackers to cause a denial of service

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

6.9CVSS5.9AI score0.02448EPSS
SaveExploits1References14
Github Security Blog
Github Security Blog
•added 2022/07/06 12:00 a.m.•55 views

lxml NULL Pointer Dereference allows attackers to cause a denial of service

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS3.8AI score0.02448EPSS
SaveExploits1References13Affected Software1
NVD
NVD
•added 2022/07/05 10:15 a.m.•28 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS0.02448EPSS
SaveExploits1References7
osv_azl
osv_azl
•added 2022/07/05 10:15 a.m.•28 views

AZL-10059 CVE-2022-2309 affecting package python-lxml for versions less than 4.9.1-1

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.5AI score0.02448EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2022/07/05 10:15 a.m.•13 views

ALPINE-CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.9AI score0.02448EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/07/05 10:15 a.m.•10 views

DEBIAN-CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.1AI score0.02448EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2022/07/05 10:15 a.m.•28 views

AZL-10058 CVE-2022-2309 affecting package libxml2 for versions less than 2.10.0-1

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.5AI score0.02448EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2022/07/05 10:15 a.m.•26 views

PYSEC-2022-230

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.5AI score0.02448EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/07/05 10:15 a.m.•88 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.5AI score0.02448EPSS
SaveExploits1References8
osv_ubuntu
osv_ubuntu
•added 2022/07/05 10:15 a.m.•43 views

UBUNTU-CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.4AI score0.02448EPSS
SaveExploits1References9
PyPA
PyPA
•added 2022/07/05 10:15 a.m.•21 views

PYSEC-2022-230

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.9AI score0.02448EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2022/07/05 9:00 a.m.•137 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.1AI score0.02448EPSS
SaveExploits1
osv_cve
osv_cve
•added 2022/07/05 9:00 a.m.•56 views

CVE-2022-2309 NULL Pointer Dereference in lxml/lxml

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

5.3CVSS5.7AI score
SaveExploits0References9
Cvelist
Cvelist
•added 2022/07/05 9:00 a.m.•41 views

CVE-2022-2309 NULL Pointer Dereference in lxml/lxml

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

5.3CVSS7.7AI score0.02448EPSS
SaveExploits1References6
CVE
CVE
•added 2022/07/05 9:00 a.m.•347 views

CVE-2022-2309

CVE-2022-2309 is a NULL-pointer dereference in libxml2 that can cause denial of service or application crash when used with lxml, specifically affecting libxml2 2.9.10–2.9.14 and related python-lxml usage. The vulnerability stems from the iterwalk function (also used by canonicalize), with potent...

7.5CVSS6.4AI score0.02448EPSS
SaveExploits1References7Affected Software1
Mend
Mend
•added 2022/07/05 9:00 a.m.•6 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS0.02448EPSS
SaveExploits1References19
AlpineLinux
AlpineLinux
•added 2022/07/05 9:00 a.m.•59 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.7AI score0.02448EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/07/05 12:00 a.m.•22 views

PT-2022-7707 · Lxml +10 · Lxml +10

Name of the Vulnerable Software and Affected Versions: lxml versions 2.9.10 through 2.9.14 Description: The issue allows attackers to cause a denial of service or application crash when lxml is used together with libxml2. It is triggered by forged input data and a vulnerable code sequence in the...

8.2CVSS6.5AI score0.41365EPSS
SaveExploits5References97
CNNVD
CNNVD
•added 2022/07/05 12:00 a.m.•7 views

lxml 和 libxml2 代码问题漏洞

lxml is lxml personal developer can interact with Python for locating elements in Html software . libxml2 is an open source library for parsing XML documents . It is written in C, and can be called for a variety of languages, such as C, C++, XSH. A code issue vulnerability exists in lxml and...

7.5CVSS6.5AI score0.02448EPSS
SaveExploits1References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/05 12:00 a.m.•5 views

CVE-2022-2309: NULL Pointer Dereference

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.3AI score0.02448EPSS
SaveExploits1References2
Rows per page
Query Builder