Debian dla-3155 : libbcel-java - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3155 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3155-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3155-1] bcel security update

Debian LTS Advisory DLA-3155-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 18, 2022 https://wiki.debian.org/LTS Package : bcel Version : 6.2-1+deb10u1 CVE ID : CVE-2022-34169 Debian Bug : 1015860 The Apache Xalan Java XSLT library is vulnerable to an...

DSA-5256-1 bcel - security update

Bulletin has no description...

Exploit for Incorrect Conversion between Numeric Types in Apache Xalan-Java

Description Checks if CVE-2022-34169 is fixed on your machine...

new packages: bcel

An update is available for bcel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Expression injection in AviatorScript

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

CVE-2021-41862

CVE-2021-41862 affects AviatorScript up to version 5.2.7. An expression parsed via the ByteCode Engineering Library (BCEL) can lead to arbitrary code execution. The entry describes an expression injection vulnerability where BCEL-encoded expressions are evaluated, enabling attacker-controlled cod...

CVE-2021-41862: Improper Neutralization of Special Elements in Output Used by a Downstream Component

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...