RHEL 8 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: read of uninitialized stack data due to too narrow xsl:number instruction and an invalid charact...

RHEL 7 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Invalid memory access leading to DoS at exsltDynMapFunction CVE-2016-4610 - libxslt: Heap overre...

RHEL 5 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt: xsltCheckRead and...

RHEL 7 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt, as used in Apple iOS...

RHEL 6 : chromium-browser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - chromium-browser: Heap buffer overflow in clipboard CVE-2020-16025 - chromium-browser: Out of bounds writ...

RHEL 6 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt: xsltCheckRead and...

RHEL 5 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt: xsltCheckRead and...

RHEL 7 : chromium-browser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - chromium-browser: pointer disclosure in sqlite CVE-2017-7000 - numbers.c in libxslt before 1.1.29, as use...

libxslt: Multiple Vulnerabilities

Background libxslt is the XSLT C library developed for the GNOME project. XSLT itself is an XML language to define transformations for XML. Description Multiple vulnerabilities have been discovered in libxslt. Please review the CVE identifiers referenced below for details. Impact Please review th...

GLSA-202310-23 : libxslt: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-23 libxslt: Multiple Vulnerabilities - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30560 Note that...

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to gain unauthorized access to protected information.

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

Oracle Linux 7 : libxslt (ELSA-2020-4005)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4005 advisory. - Fix CVE-2019-18197 1775516 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

EulerOS Virtualization 3.0.6.6 : libxslt (EulerOS-SA-2023-2399)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2023-2399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updat...

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2023-2202)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : libxslt (EulerOS-SA-2023-2202)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap...

Tenable Nessus < 10.5.2 Multiple Vulnerabilities (TNS-2023-20)

Tenable Nessus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus"; ifdescripti...

Tenable Nessus < 10.5.2 Multiple Vulnerabilities (TNS-2023-20)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-20 advisory. - Nessus leverages third-party software to help provide underlying functionality...

[R1] Nessus Version 10.5.2 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.5.2 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 05/11/2023 - 15:20 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components libxml2, libxslt were found to contain vulnerabilities, and updated versions have been...