2113 matches found
Astra Linux – Vulnerability in libxslt
In numbers.c in libxslt before version 1.1.43, there is a use-after-free issue. This occurs because, in nested XPath evaluations, an XPath context node can be modified but cannot be restored. This issue is related to the functions xsltNumberFormatGetValue, xsltEvalXPathPredicate,...
Astra Linux – Vulnerability in libxslt
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data...
Astra Linux – Vulnerability in Chromium, LibXSLT
Before version 91.0.4472.164, using Blink XSLT in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
NewStart CGSL MAIN 7.02 : libxml2 Multiple Vulnerabilities (NS-SA-2026-0087)
The remote NewStart CGSL host, running version MAIN 7.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an...
NewStart CGSL MAIN 7.02 : libxslt Multiple Vulnerabilities (NS-SA-2026-0092)
The remote NewStart CGSL host, running version MAIN 7.02, has libxslt packages installed that are affected by multiple vulnerabilities: - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is...
CVE-2022-51000
Nokogiri before 1.13.2, when using bundled libxml2 and libxslt, is affected by the libxslt flaw CVE-2021-30560 and the libxml2 flaw CVE-2022-23308...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
Linux Distros Unpatched Vulnerability : CVE-2025-71406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use- after-free vulnerabilities: CVE-2025-24855 use-after-free ...
Linux Distros Unpatched Vulnerability : CVE-2022-51000
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via...
CVE-2025-71406
A flaw was found in Nokogiri, which bundles a vulnerable version of libxslt. This vulnerability involves a use-after-free condition that can be triggered by processing specially crafted Extensible Stylesheet Language Transformations XSLT. A remote attacker could exploit this to cause memory...
Use After Free
Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Use After Free through the processing of crafted XSLT, which leverages a vulnerable bundled version of libxslt. An attacker can cau...
CVE-2025-71406
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2022-51000
Rejected reason: This CVE ID has been rejected as a duplicate...
UBUNTU-CVE-2025-71406
Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use-after-free vulnerabilities: CVE-2025-24855 use-after-free of the XPath context node due to xsltEvalXPathStringNs leaking xpathCtxt-node and CVE-2024-55549 use-after-free related to excluded result...
CVE-2022-51000
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2025-71406
Rejected reason: This CVE ID has been rejected as a duplicate...
UBUNTU-CVE-2022-51000
Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via CVE-2021-30560 in libxslt, an application transforming XML with untrusted XSL stylesheets is vulnerable to a denial-of-service attack. Via...
EUVD-2025-210773
Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use-after-free vulnerabilities: CVE-2025-24855 use-after-free of the XPath context node due to xsltEvalXPathStringNs leaking xpathCtxt-node and CVE-2024-55549 use-after-free related to excluded result...
CVE-2025-71406
Nokogiri before 1.18.4 bundles libxslt prior to 1.1.43, which contains two use-after-free vulnerabilities: CVE-2025-24855 (XPath context node leak via xsltEvalXPathStringNs) and CVE-2024-55549 (excluded result prefixes/namespaces). Processing crafted XSLT can trigger memory corruption, potentiall...
