Lucene search
+L

1657 matches found

Fedora
Fedora
added 2020/03/26 9:48 a.m.48 views

[SECURITY] Fedora 30 Update: libxslt-1.1.34-1.fc30

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT eng ine...

5.3CVSS1.4AI score0.06457EPSS
SaveExploits0
Fedora
Fedora
added 2020/03/18 2:23 a.m.45 views

[SECURITY] Fedora 31 Update: libxslt-1.1.34-1.fc31

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT eng ine...

5.3CVSS1.4AI score0.06457EPSS
SaveExploits0
OSV
OSV
added 2020/01/31 1:15 p.m.8 views

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

7.5CVSS5.9AI score0.01888EPSS
SaveExploits0References2
NVD
NVD
added 2020/01/31 1:15 p.m.24 views

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

7.5CVSS7.5AI score0.01888EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2020/01/31 1:15 p.m.42 views

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

7.5CVSS7.2AI score0.01888EPSS
SaveExploits0References1
Prion
Prion
added 2020/01/31 1:15 p.m.23 views

Design/Logic Flaw

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

5CVSS7.5AI score0.01888EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/01/31 1:15 p.m.7 views

UBUNTU-CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

7.5CVSS5.9AI score0.01888EPSS
SaveExploits0References2
CVE
CVE
added 2020/01/31 12:2 p.m.68 views

CVE-2020-7914

The vulnerability CVE-2020-7914 affects JetBrains IntelliJ IDEA 2019.2 and is caused by a misconfiguration in the XSLT debugger plugin that enables arbitrary file reads over the network. The issue allows disclosure of local files via network interactions and was fixed in IntelliJ IDEA 2019.3. Con...

7.5CVSS7.4AI score0.01888EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/31 12:2 p.m.30 views

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

7.5AI score0.01888EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.39 views

Fedora Update for libxslt FEDORA-2019-fdf6ec39b4

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS6.8AI score0.06457EPSS
SaveExploits0References2
OSV
OSV
added 2019/12/11 1:15 a.m.2 views

DEBIAN-CVE-2019-5815

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data...

7.5CVSS7.7AI score0.01817EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/12/09 12:0 a.m.32 views

EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-2541)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. ...

7.5CVSS7.9AI score0.04483EPSS
SaveExploits0References2
Prion
Prion
added 2019/12/05 9:15 p.m.19 views

Remote code execution

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

6.5CVSS7.9AI score0.2855EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2019/12/05 9:15 p.m.20 views

CVE-2012-1592

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

8.8CVSS7.6AI score0.2855EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2019/12/05 8:57 p.m.32 views

CVE-2012-1592

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

8.9AI score0.2855EPSS
SaveExploits1References7
CVE
CVE
added 2019/12/05 8:57 p.m.91 views

CVE-2012-1592

Apache Struts2 is affected by a local code execution vulnerability involving processing malformed XSLT files. The issue affects Struts2 versions prior to 2.5.22 and can allow a malicious user to upload and execute arbitrary files on the server. A fix exists with Struts 2.5.22 or later; advisory e...

8.8CVSS8.8AI score0.2855EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.3 views

The vulnerability of the XSLT C library, libxslt, related to access control deficiencies, allows attackers to bypass security mechanisms and execute an XXE attack.

The vulnerability of the XSLT C library, libxslt, is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security measures and carry out an XXE attack...

10CVSS6.8AI score0.05089EPSS
SaveExploits0References19Affected Software8
NVD
NVD
added 2019/11/05 11:15 p.m.23 views

CVE-2019-8119

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated admin user with import product privileges can delete files through bulk product import and inject code into XSLT file. The combination of these...

7.2CVSS7.4AI score0.01852EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/05 11:15 p.m.14 views

CVE-2019-8119

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated admin user with import product privileges can delete files through bulk product import and inject code into XSLT file. The combination of these...

7.2CVSS7.7AI score
SaveExploits0References1
Prion
Prion
added 2019/11/05 11:15 p.m.14 views

Remote code execution

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated admin user with import product privileges can delete files through bulk product import and inject code into XSLT file. The combination of these...

6.5CVSS7.3AI score0.01852EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder