Lucene search
+L

30 matches found

CNVD
CNVD
added 2022/10/12 12:00 a.m.33 views

Apache Commons JXPath Buffer Overflow Vulnerability (CNVD-2022-73687)

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation. Apache Commons JXPath suffers from a buffer overflow vulnerability that can be exploited by remote attackers to cause a denial of service...

5.9AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/10/12 12:00 a.m.88 views

Apache Commons JXPath Buffer Overflow Vulnerability (CNVD-2022-73689)

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation, U.S.A. A buffer overflow vulnerability exists in Apache Commons JXPath, which is caused by a stack buffer overflow when parsing XPath. A remote attacker could exploit this vulnerability to cause a denial...

5.5AI score0.01267EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/10/06 12:00 a.m.9 views

编号撤回

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation, U.S.A. A buffer overflow vulnerability exists in Apache Commons JXPath, which is caused by a stack buffer overflow when parsing XPath. A remote attacker could exploit this vulnerability to cause a denial...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2022/10/06 12:00 a.m.9 views

编号撤回

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation in the U.S. A buffer overflow vulnerability exists in Apache Commons JXPath, which stems from a parser running on user-supplied input allowing an attacker to submit special data causing a stack overflow t...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/10/06 12:00 a.m.9 views

PT-2022-5014 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified GeoServer versions prior to 2.23.6, 2.24.4, and 2.25.2 hermes-management versions prior to 2.2.9 Description: The issue is related to the application of external input for class selection ...

10CVSS8.5AI score0.99813EPSS
SaveExploits27References49
CNNVD
CNNVD
added 2022/10/06 12:00 a.m.9 views

编号撤回

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation. Apache Commons JXPath suffers from a buffer overflow vulnerability that can be exploited by remote attackers to cause a denial of service...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2022/10/06 12:00 a.m.26 views

Apache Commons JXPath 缓冲区错误漏洞

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation, U.S.A. A buffer overflow vulnerability exists in Apache Commons JXPath, which is caused by a stack buffer overflow when parsing XPath. A remote attacker could exploit this vulnerability to cause a denial...

6.5CVSS7.2AI score0.01267EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/26 12:00 a.m.19 views

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/22 12:00 a.m.7 views

PT-2022-37209 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: A security exception crash has been reported in Apache Commons JXPath. The crash occurs in the org.apache.commons.jxpath.ri.axes package, specifically in the...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/21 12:00 a.m.6 views

PT-2022-37208 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: The issue is related to a security exception in the Apache Commons JXPath library. The crash occurs in the parenthesize method of CoreOperation and the toString method of...

6.9AI score
SaveExploits0References2
Rows per page
Query Builder