Lucene search
+L

771 matches found

OSV
OSV
added 2025/04/11 1:44 p.m.5 views

OESA-2025-1418 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

8.1CVSS7.5AI score0.00824EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2025/04/07 2:13 a.m.6 views

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

6.5CVSS6.8AI score0.00824EPSS
SaveExploits1References10
Packet Storm News
Packet Storm News
added 2025/04/04 12:0 a.m.7 views

Firefox xslt/txNodeSorter Out-Of-Bounds Access

An inconsistent comparator in xslt/txNodeSorter leads to out-of-bounds access in Firefox...

8.1CVSS8.8AI score0.00408EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/04/03 10:41 a.m.7 views

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

6.5CVSS6.8AI score0.00824EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 2025/04/03 10:10 a.m.10 views

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

6.5CVSS6.8AI score0.00824EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 2025/04/03 1:26 a.m.7 views

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

6.5CVSS6.8AI score0.00824EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
added 2025/04/02 1:29 p.m.7 views

SUSE CVE-2025-3028

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

6.5CVSS7AI score0.00824EPSS
SaveExploits1References14
OSV
OSV
added 2025/04/01 1:15 p.m.9 views

UBUNTU-CVE-2025-3028

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

6.5CVSS6.9AI score0.00824EPSS
SaveExploits1References12
Fedora
Fedora
added 2025/04/01 1:41 a.m.11 views

[SECURITY] Fedora 40 Update: mingw-libxslt-1.1.43-1.fc40

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT engine...

7.8CVSS7.4AI score0.00332EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:0 a.m.16 views

The vulnerability of the numbers.ct file in the libxslt library allows a hacker to execute arbitrary code.

The vulnerability of the numbers.ct file in the libxslt library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References13Affected Software7
Packet Storm
Packet Storm
added 2025/03/19 12:0 a.m.677 views

libxslt xsltParseStylesheetProcess Use-After-Free

libxslt suffers from a use-after-free vulnerability in xsltParseStylesheetProcess. There is a use-after-free issue in libxslt read on a namespace URL stored in exclPrefixTab. The issue was reproduced on the latest Git version. The proof of concept and ASAN log are provided at the end of the repor...

7.8CVSS7AI score0.00332EPSS
SaveExploits3
SUSE CVE
SUSE CVE
added 2025/03/14 2:45 p.m.7 views

SUSE CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References12
Snyk
Snyk
added 2025/03/14 12:0 a.m.6 views

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free through the xsltGetInheritedNsList process. An attacker can manipulate memory and potentially execute arbitrary code by excluding result prefixes. Remediation Upgrade libxslt to version 1.1.43 or higher. References - GitH...

7.8CVSS7.7AI score0.00332EPSS
SaveExploits3References2
RedHat Linux
RedHat Linux
added 2025/03/13 7:11 a.m.11 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/03/10 6:17 a.m.20 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/03/10 6:14 a.m.7 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/03/10 6:13 a.m.7 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/03/10 5:28 a.m.8 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/03/10 5:26 a.m.10 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/03/06 11:54 a.m.6 views

firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access...

8.1CVSS7.3AI score0.00408EPSS
SaveExploits0References7
Rows per page
Query Builder