2113 matches found
Astra Linux – Vulnerability in libxml2
In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...
Astra Linux – Vulnerability in libxslt
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data...
Astra Linux – Vulnerability in Chromium, LibXSLT
Before version 91.0.4472.164, using Blink XSLT in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
NewStart CGSL MAIN 7.02 : libxml2 Multiple Vulnerabilities (NS-SA-2026-0087)
The remote NewStart CGSL host, running version MAIN 7.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an...
NewStart CGSL MAIN 7.02 : libxslt Multiple Vulnerabilities (NS-SA-2026-0092)
The remote NewStart CGSL host, running version MAIN 7.02, has libxslt packages installed that are affected by multiple vulnerabilities: - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is...
CVE-2022-51000
Nokogiri before 1.13.2, when using bundled libxml2 and libxslt, is affected by the libxslt flaw CVE-2021-30560 and the libxml2 flaw CVE-2022-23308...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
Linux Distros Unpatched Vulnerability : CVE-2025-71406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use- after-free vulnerabilities: CVE-2025-24855 use-after-free ...
Linux Distros Unpatched Vulnerability : CVE-2022-51000
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via...
CVE-2025-71406
A flaw was found in Nokogiri, which bundles a vulnerable version of libxslt. This vulnerability involves a use-after-free condition that can be triggered by processing specially crafted Extensible Stylesheet Language Transformations XSLT. A remote attacker could exploit this to cause memory...
Use After Free
Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Use After Free through the processing of crafted XSLT, which leverages a vulnerable bundled version of libxslt. An attacker can cau...
CVE-2025-71406
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2022-51000
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2025-71406
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2022-51000
Rejected reason: This CVE ID has been rejected as a duplicate...
UBUNTU-CVE-2022-51000
Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via CVE-2021-30560 in libxslt, an application transforming XML with untrusted XSL stylesheets is vulnerable to a denial-of-service attack. Via...
UBUNTU-CVE-2025-71406
Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use-after-free vulnerabilities: CVE-2025-24855 use-after-free of the XPath context node due to xsltEvalXPathStringNs leaking xpathCtxt-node and CVE-2024-55549 use-after-free related to excluded result...
CVE-2025-71406
Nokogiri before 1.18.4 bundles libxslt prior to 1.1.43, which contains two use-after-free vulnerabilities: CVE-2025-24855 (XPath context node leak via xsltEvalXPathStringNs) and CVE-2024-55549 (excluded result prefixes/namespaces). Processing crafted XSLT can trigger memory corruption, potentiall...
