Lucene search
+L

1207 matches found

RedHat Linux
RedHat Linux
added 2025/04/07 2:2 a.m.12 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 1:56 a.m.10 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 1:38 a.m.9 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References5
OSV
OSV
added 2025/04/04 10:52 a.m.14 views

CLSA-2025-1743763948 libxslt: Fix of CVE-2025-24855

CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations...

7.8CVSS7.1AI score0.00346EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.12 views

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS allows a perpetrator to execute arbitrary commands.

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS relates to the failure to neutralize data in XPath expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS5.9AI score0.00517EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2025/04/02 2:16 p.m.18 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/04/01 12:0 a.m.20 views

Azure Linux 3.0 Security Update: libxslt (CVE-2025-24855)

The version of libxslt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24855 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath...

7.8CVSS7AI score0.00346EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/03/31 2:9 a.m.13 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References5
Fedora
Fedora
added 2025/03/29 1:50 a.m.20 views

[SECURITY] Fedora 40 Update: libxml2-2.12.10-1.fc40

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

9.8CVSS7.1AI score0.01136EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/03/25 7:0 a.m.8 views

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

...

7.8CVSS7AI score0.00346EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/03/25 12:0 a.m.21 views

CBL Mariner 2.0 Security Update: libxslt (CVE-2025-24855)

The version of libxslt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24855 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath...

7.8CVSS7AI score0.00346EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/03/24 2:10 p.m.10 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References5
OSV
OSV
added 2025/03/22 5:53 p.m.21 views

MGASA-2025-0110 Updated libxslt packages fix security vulnerabilities

xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes CVE-2024-55549. numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValu...

7.8CVSS7.1AI score0.00346EPSS
SaveExploits4References3
Mageia
Mageia
added 2025/03/22 5:53 p.m.37 views

Updated libxslt packages fix security vulnerabilities

xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes CVE-2024-55549. numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValu...

7.8CVSS6.8AI score0.00346EPSS
SaveExploits4References2
Snyk
Snyk
added 2025/03/20 12:32 p.m.3 views

Improper Neutralization of Data within XPath Expressions ('XPath Injection')

Overview composio-core is a Core package to act as a bridge between composio platform and other services. Affected versions of this package are vulnerable to Improper Neutralization of Data within XPath Expressions 'XPath Injection' via the BROWSERTOOLGOTOPAGE and BROWSERTOOLGETPAGEDETAILS action...

7.5CVSS6.8AI score0.00679EPSS
SaveExploits1References2
Fedora
Fedora
added 2025/03/17 1:38 a.m.24 views

[SECURITY] Fedora 41 Update: libxml2-2.12.10-1.fc41

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

9.8CVSS6.7AI score0.01136EPSS
SaveExploits0
Fedora
Fedora
added 2025/03/15 12:55 a.m.18 views

[SECURITY] Fedora 42 Update: libxml2-2.12.10-1.fc42

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

9.8CVSS7.1AI score0.01136EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/03/14 2:45 p.m.7 views

SUSE CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.5AI score0.00346EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2025/03/14 8:52 a.m.19 views

CVE-2025-24855

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored. Mitigation Mitigation for this issue is either not available or...

7.8CVSS7.7AI score0.00346EPSS
SaveExploits1References4
NVD
NVD
added 2025/03/14 2:15 a.m.21 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS0.00346EPSS
SaveExploits1References2
Rows per page
Query Builder