Lucene search
+L

1870 matches found

OSV
OSV
added 2019/05/21 4:33 p.m.4 views

OPENSUSE-SU-2019:1433-1 Security update for libxslt

This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160. This update was imported from the SUSE:SLE-15:Update update...

9.8CVSS9.1AI score0.0523EPSS
SaveExploits0References3
OSV
OSV
added 2019/05/21 4:24 p.m.3 views

OPENSUSE-SU-2019:1428-1 Security update for libxslt

This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160. This update was imported from the SUSE:SLE-15:Update update...

9.8CVSS9.1AI score0.0523EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2019/05/21 12:00 a.m.211 views

Security update for libxslt (moderate)

openSUSE Security Update: Security update for libxslt Announcement ID: openSUSE-SU-2019:1433-1 Rating: moderate References: 1132160 Cross-References: CVE-2019-11068 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libxslt...

9.8CVSS7.8AI score0.0523EPSS
SaveExploits0References1
OSV
OSV
added 2019/05/18 12:33 p.m.8 views

MGASA-2019-0175 Updated libxslt packages fix security vulnerability

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded CVE-2019-11068...

9.8CVSS9.4AI score0.0523EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/05/18 12:33 p.m.46 views

Updated libxslt packages fix security vulnerability

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded CVE-2019-11068...

9.8CVSS3.6AI score0.0523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/15 12:00 a.m.26 views

Photon OS 1.0: Libxslt PHSA-2019-1.0-0224

An update of the libxslt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0224. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS7AI score0.0523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/15 12:00 a.m.34 views

SUSE SLED12 / SLES12 Security Update : libxslt (SUSE-SU-2019:1232-1)

This update for libxslt fixes the following issues : CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160. Note that Tenable Network Security has extracted the preceding description block...

9.8CVSS7.2AI score0.0523EPSS
SaveExploits0References4
OSV
OSV
added 2019/05/14 3:08 p.m.6 views

SUSE-SU-2019:1232-1 Security update for libxslt

This update for libxslt fixes the following issues: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160...

9.8CVSS9.6AI score0.0523EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:00 a.m.29 views

SUSE SLED15 / SLES15 Security Update : libxslt (SUSE-SU-2019:1221-1)

This update for libxslt fixes the following issues : Security issue fixed : CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160. Note that Tenable Network Security has extracted the preceding...

9.8CVSS7.2AI score0.0523EPSS
SaveExploits0References4
OSV
OSV
added 2019/05/13 11:28 a.m.9 views

SUSE-SU-2019:1221-1 Security update for libxslt

This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160...

9.8CVSS9.6AI score0.0523EPSS
SaveExploits0References3
Veracode
Veracode
added 2019/05/02 4:43 a.m.26 views

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

6.8CVSS10.1AI score0.02455EPSS
SaveExploits1References14Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.32 views

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

6.8CVSS10AI score0.02455EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.29 views

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

6.8CVSS10AI score0.02455EPSS
SaveExploits1References18Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.36 views

Denial Of Service (DoS)

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. A heap-based buffer overflow flaw was found in the way libxslt applied templates...

6.8CVSS10AI score0.02455EPSS
SaveExploits1References21Affected Software1
Veracode
Veracode
added 2019/05/02 4:42 a.m.58 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...

9.8CVSS6.3AI score0.99998EPSS
SaveExploits59References9Affected Software2
Veracode
Veracode
added 2019/05/02 4:42 a.m.52 views

Arbitrary Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...

9.8CVSS6.3AI score0.99998EPSS
SaveExploits59References24Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/05/01 12:00 a.m.33 views

EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-1318)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon...

9.8CVSS7.2AI score0.0523EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/05/01 12:00 a.m.43 views

EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2019-1317)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receivi...

9.8CVSS7.3AI score0.0523EPSS
SaveExploits0References2
ossfuzz
ossfuzz
added 2019/04/27 5:48 a.m.19 views

libxslt/xslt: Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5631739747106816 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

6.5AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2019/04/25 8:26 a.m.30 views

CVE-2019-5815

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data...

7.5CVSS3.8AI score0.01817EPSS
SaveExploits0References4
Rows per page
Query Builder