Lucene search
K

16 matches found

Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.11 views

PT-2026-38849

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS5.8AI score0.00087EPSS
Exploits1References4
OSV
OSV
added 2026/05/06 2:45 p.m.2 views

BIT-JAVA-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.1AI score0.00104EPSS
Exploits3References3
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.2 views

EulerOS Virtualization 2.10.0 : libxslt (EulerOS-SA-2026-1181)

According to the versions of the libxslt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified...

7.8CVSS5.8AI score0.00374EPSS
Exploits4References4
OSV
OSV
added 2025/10/08 12:0 a.m.3 views

OPENSUSE-SU-2025:15611-1 libexslt0-1.1.43-3.1 on GA media

These are all security issues fixed in the libexslt0-1.1.43-3.1 package on the GA media of openSUSE Tumbleweed...

5.5CVSS5.8AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2025/09/25 4:15 p.m.1 views

AZL-67878 CVE-2025-10911 affecting package libxslt 1.1.43-3

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...

5.5CVSS6AI score0.00019EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-24855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is...

7.8CVSS7.2AI score0.00087EPSS
Exploits1References2
OSV
OSV
added 2025/07/10 2:15 p.m.2 views

AZL-65409 CVE-2025-7425 affecting package libxslt 1.1.43-3

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...

7.8CVSS6.6AI score0.00192EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/05/12 12:0 a.m.3 views

EulerOS 2.0 SP10 : libxslt (EulerOS-SA-2025-1529)

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never...

7.8CVSS7.1AI score0.00104EPSS
Exploits4References3
Tenable Nessus
Tenable Nessus
added 2025/05/12 12:0 a.m.4 views

EulerOS 2.0 SP10 : libxslt (EulerOS-SA-2025-1528)

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never...

7.8CVSS7.1AI score0.00104EPSS
Exploits4References3
Amazon
Amazon
added 2025/04/01 12:0 a.m.1 views

Important: libxslt

Issue Overview: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2024-55549 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored...

7.8CVSS7.8AI score0.00104EPSS
Exploits4
OSV
OSV
added 2025/03/14 2:15 a.m.1 views

ALPINE-CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7AI score0.00104EPSS
Exploits3References1
Debian CVE
Debian CVE
added 2025/03/14 12:0 a.m.5 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00087EPSS
Exploits1
Debian CVE
Debian CVE
added 2025/03/14 12:0 a.m.8 views

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.6AI score0.00104EPSS
Exploits3
FreeBSD
FreeBSD
added 2025/03/13 12:0 a.m.17 views

libxslt -- multiple vulnerabilities

CVE-2024-55549 Fix UAF related to excluded namespaces xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2025-24855 Fix use-after-free of XPath context node numbers.c in libxslt before 1.1.43 has a use-after-free because , in...

7.8CVSS7.3AI score0.00104EPSS
Exploits4References2
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.1 views

PT-2025-3438 · Evehome · Eve Play

Name of the Vulnerable Software and Affected Versions: Eve Play versions through 1.1.42 Description: An attacker could exploit the issue of using a password hash with insufficient computational effort in EveHome Eve Play to execute arbitrary code. Recommendations: For versions through 1.1.42,...

9.8CVSS8AI score0.0014EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.0 views

PT-2025-11225

Name of the Vulnerable Software and Affected Versions libxslt versions prior to 1.1.43 libxslt versions 1.1.34-4ubuntu0.20.04.2 libxslt versions 1.1.35-1+deb12u1 Description libxslt is a library used for transforming XML files into other formats using XSLT. A use-after-free issue exists in the...

7.8CVSS7.4AI score0.00104EPSS
Exploits3References119
Rows per page
Query Builder