Lucene search
+L

94 matches found

RedHat Linux
RedHat Linux
added 2025/04/07 1:38 a.m.8 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2025/04/02 2:16 p.m.17 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/04/01 12:0 a.m.19 views

Azure Linux 3.0 Security Update: libxslt (CVE-2025-24855)

The version of libxslt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24855 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath...

7.8CVSS7AI score0.00332EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/03/31 2:9 a.m.12 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/25 12:0 a.m.20 views

CBL Mariner 2.0 Security Update: libxslt (CVE-2025-24855)

The version of libxslt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24855 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath...

7.8CVSS7AI score0.00332EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/03/24 2:10 p.m.9 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References5
OSV
OSV
added 2025/03/22 5:53 p.m.20 views

MGASA-2025-0110 Updated libxslt packages fix security vulnerabilities

xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes CVE-2024-55549. numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValu...

7.8CVSS7.1AI score0.00332EPSS
SaveExploits4References3
Mageia
Mageia
added 2025/03/22 5:53 p.m.35 views

Updated libxslt packages fix security vulnerabilities

xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes CVE-2024-55549. numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValu...

7.8CVSS6.8AI score0.00332EPSS
SaveExploits4References2
OSV
OSV
added 2025/03/21 1:17 p.m.4 views

OESA-2025-1296 libxslt security update

Libxslt is the XSLT C library developed for the GNOME project Security Fixes: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.CVE-2024-55549 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath...

7.8CVSS7AI score0.00332EPSS
SaveExploits4References3
RedhatCVE
RedhatCVE
added 2025/03/14 8:52 a.m.17 views

CVE-2025-24855

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored. Mitigation Mitigation for this issue is either not available or...

7.8CVSS7.7AI score0.00332EPSS
SaveExploits1References4
NVD
NVD
added 2025/03/14 2:15 a.m.19 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS0.00332EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/14 2:15 a.m.10 views

AZL-58644 CVE-2025-24855 affecting package libxslt for versions less than 1.1.34-8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS6.8AI score0.00332EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/14 2:15 a.m.2 views

DEBIAN-CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/14 12:0 a.m.20 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/03/14 12:0 a.m.14 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/14 12:0 a.m.243 views

CVE-2025-24855

CVE-2025-24855 affects libxslt, specifically numbers.c, where a use-after-free can occur during nested XPath evaluations if the XPath context node is modified but not restored. The issue is documented as a Use-After-Free in numbers.c and is connected to related code paths xsltNumberFormatGetValue...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/03/14 12:0 a.m.8 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00332EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/03/14 12:0 a.m.29 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS0.00332EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2025/03/14 12:0 a.m.10 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.7AI score0.00332EPSS
SaveExploits1
OSV
OSV
added 2025/02/21 9:32 p.m.9 views

CVE-2025-27104 double eval in For List Iter in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce multiple writes, it can consume side effects produced in the loop body e.g. read a storage variable...

2.3CVSS7.3AI score0.0043EPSS
SaveExploits1References4
Rows per page
Query Builder