Lucene search
+L

1044 matches found

Amazon
Amazon
•added 2022/07/20 12:00 a.m.•168 views

Important: java-17-amazon-corretto

Issue Overview: Generated code produced by C1 may leak a package-private class to a class from a different package. CVE-2022-21540 MethodHandle.invokeBasic method can be accessed on byte code level from an arbitrary class. CVE-2022-21541 computeNextExponential sometimes returns negative numbers...

7.5CVSS7.9AI score0.81759EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2022/07/19 10:54 p.m.•255 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.81759EPSS
SaveExploits2References3
NVD
NVD
•added 2022/07/19 6:15 p.m.•57 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS0.81759EPSS
SaveExploits2References24
osv_debian
osv_debian
•added 2022/07/19 6:15 p.m.•14 views

DEBIAN-CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7.2AI score0.81759EPSS
SaveExploits2References1
osv_ubuntu
osv_ubuntu
•added 2022/07/19 6:15 p.m.•15 views

UBUNTU-CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS6.9AI score0.81759EPSS
SaveExploits2References9
Prion
Prion
•added 2022/07/19 6:15 p.m.•47 views

Integer overflow

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

5CVSS7.9AI score0.81759EPSS
SaveExploits2References23Affected Software8
UbuntuCve
UbuntuCve
•added 2022/07/19 5:37 p.m.•76 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS6.8AI score0.81759EPSS
SaveExploits2References8
CVE
CVE
•added 2022/07/19 12:00 a.m.•761 views

CVE-2022-34169

CVE-2022-34169 affects the Apache Xalan Java XSLT library. It describes an integer truncation vulnerability when processing malicious XSLT stylesheets, which can corrupt Java class files generated by the internal XSLTC compiler and allow execution of arbitrary Java bytecode. Public references in ...

7.5CVSS8.2AI score0.81759EPSS
SaveExploits2References24Affected Software1
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•16 views

Apache Xalan 输入验证错误漏洞

Apache Xalan is an open source software library from the Apache Foundation USA. Apache Xalan Java XSLT Stock in Input Validation Error vulnerability stems from an integer truncation issue when processing malicious XSLT stylesheets. The vulnerability can be exploited to corrupt Java class files...

7.5CVSS5.9AI score0.81759EPSS
SaveExploits2References65
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/19 12:00 a.m.•6 views

CVE-2022-34169: Incorrect Conversion between Numeric Types

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7.5AI score0.81759EPSS
SaveExploits2References34
Vulnrichment
Vulnrichment
•added 2022/07/19 12:00 a.m.•9 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7AI score0.81759EPSS
SaveExploits2References24
Cvelist
Cvelist
•added 2022/07/19 12:00 a.m.•77 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

8.2AI score0.81759EPSS
SaveExploits2References24
Mend
Mend
•added 2022/07/19 12:00 a.m.•9 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

8.7CVSS0.81759EPSS
SaveExploits2References48
AlpineLinux
AlpineLinux
•added 2022/07/19 12:00 a.m.•111 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS8.4AI score0.81759EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2022/07/19 12:00 a.m.•116 views

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7.2AI score0.81759EPSS
SaveExploits2
osv_cve
osv_cve
•added 2022/07/19 12:00 a.m.•60 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score
SaveExploits0References26
Positive Technologies
Positive Technologies
•added 2022/07/04 12:00 a.m.•17 views

PT-2022-3956

Name of the Vulnerable Software and Affected Versions Apache Xalan Java XSLT library versions prior to 2.7.3 Description The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generat...

7.8CVSS7.4AI score0.81759EPSS
SaveExploits2References410
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-1102)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•12 views

Mageia: Security Advisory (MGASA-2021-0123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References5
Rows per page
Query Builder