Lucene search
+L

1882 matches found

Prion
Prion
added 2017/04/24 11:59 p.m.31 views

Integer overflow

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

6.8CVSS8.1AI score0.02171EPSS
SaveExploits0References7Affected Software6
OSV
OSV
added 2017/04/24 11:59 p.m.7 views

DEBIAN-CVE-2017-5029

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

8.8CVSS6.7AI score0.02171EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/24 11:59 p.m.7 views

ALPINE-CVE-2017-5029

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

8.8CVSS7AI score0.02171EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/24 11:59 p.m.49 views

CVE-2017-5029

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

8.8CVSS6.5AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2017/04/24 11:00 p.m.30 views

CVE-2017-5029

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

8.8CVSS7AI score0.02171EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/04/24 11:00 p.m.55 views

CVE-2017-5029

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

8.8CVSS8.5AI score0.02171EPSS
SaveExploits0
CVE
CVE
added 2017/04/24 11:00 p.m.219 views

CVE-2017-5029

CVE-2017-5029 affects libxslt 1.1.29 and is used by Blink/Chrome. The issue is an integer overflow in xsltAddTextString during a size calculation, enabling a remote attacker to cause an out-of-bounds memory write via a crafted HTML page. Connected records corroborate the libxslt involvement and i...

8.8CVSS7.6AI score0.02171EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2017/04/24 11:00 p.m.32 views

CVE-2017-5029

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...

8.4AI score0.02171EPSS
SaveExploits0References7
Apple
Apple
added 2017/04/24 6:47 a.m.66 views

About the security content of iCloud for Windows 6.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

8.8CVSS0.3AI score0.06334EPSS
SaveExploits10Affected Software1
CNVD
CNVD
added 2017/04/18 12:00 a.m.8 views

Unspecified vulnerability in libxslt math.random function

libxslt is an XSLT XML Language for Defining XML Transformations C library developed for the GNOME project. A security vulnerability exists in libxslt 1.1.29 and earlier versions due to the program failing to initialize the EXSLT math.random function with a random seed. An attacker could use this...

5.3CVSS9.2AI score0.02393EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/04/18 12:00 a.m.9 views

Apple macOS Sierra libxslt has multiple memory corruption vulnerabilities

Apple macOS Sierra is a suite of specialized operating systems developed by Apple for Mac computers. libxslt is an XSLT XML Language for Defining XML Transformations C library developed for the GNOME project. Multiple memory corruption vulnerabilities exist in the libxslt component in Apple macOS...

9.8CVSS6.8AI score0.01224EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/04/13 12:00 a.m.18 views

The vulnerability of the Mac OS X operating system, which allows a perpetrator to trigger a service failure or cause other adverse effects

The vulnerability of the libxslt component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects such as memory corruption through unknown mea...

7.5CVSS7.9AI score0.01224EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2017/04/05 9:59 p.m.31 views

Code injection

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

5CVSS6.7AI score0.02393EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/04/05 9:59 p.m.8 views

DEBIAN-CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

5.3CVSS9AI score0.02393EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/04/05 9:59 p.m.29 views

CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

5.3CVSS6.4AI score0.02393EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/05 9:59 p.m.13 views

CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

5.3CVSS6.6AI score
SaveExploits0References6
NVD
NVD
added 2017/04/05 9:59 p.m.25 views

CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

5.3CVSS6.6AI score0.02393EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2017/04/05 9:00 p.m.58 views

CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

5.3CVSS5.6AI score0.02393EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/04/05 9:00 p.m.50 views

CVE-2015-9019

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...

6.5AI score0.02393EPSS
SaveExploits0References2
CVE
CVE
added 2017/04/05 9:00 p.m.114 views

CVE-2015-9019

CVE-2015-9019 affects libxslt 1.1.29 and earlier, where the EXSLT math.random function is not initialized with a random seed at startup, which could cause predictable outputs. The Connected Documents confirm this CVE entry and describe the root cause (missing random seed) and the affected version...

5.3CVSS6.3AI score0.02393EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder