Lucene search
K

4 matches found

OSV
OSV
added 2026/05/06 2:43 p.m.1 views

BIT-JAVA-MIN-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.10953EPSS
Exploits2References25
RedHat Linux
RedHat Linux
added 2022/07/28 3:45 p.m.4 views

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.10953EPSS
Exploits2References4
Veracode
Veracode
added 2022/07/20 8:21 a.m.139 views

Remote Code Execution

xalan:xalan is vulnerable to remote code execution. An attacker is able to corrupt Java class files generated by the internal XSLTC compiler and execute harmful Java bytecodes on the host machine due to an integer truncation flaw which occurs during XSLT style sheet processing...

7.5CVSS8.5AI score0.10953EPSS
Exploits2References31Affected Software9
OpenVAS
OpenVAS
added 2016/03/31 12:0 a.m.22 views

Amazon Linux: Security Advisory (ALAS-2016-672)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.5AI score0.2205EPSS
Exploits0References2
Rows per page
Query Builder