Lucene search
+L

1874 matches found

OSV
OSV
added 2025/03/14 2:15 a.m.7 views

ALPINE-CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.4AI score0.00346EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/14 2:15 a.m.18 views

UBUNTU-CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS6.9AI score0.00346EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2025/03/14 12:00 a.m.9 views

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.7AI score0.00346EPSS
SaveExploits3
Vulnrichment
Vulnrichment
added 2025/03/14 12:00 a.m.16 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/14 12:00 a.m.23 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.5AI score
SaveExploits0References4
CVE
CVE
added 2025/03/14 12:00 a.m.253 views

CVE-2025-24855

CVE-2025-24855 affects libxslt, specifically numbers.c, where a use-after-free can occur during nested XPath evaluations if the XPath context node is modified but not restored. The issue is documented as a Use-After-Free in numbers.c and is connected to related code paths xsltNumberFormatGetValue...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/03/14 12:00 a.m.31 views

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS0.00346EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2025/03/14 12:00 a.m.6 views

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2025/03/14 12:00 a.m.7 views

Libxslt 资源管理错误漏洞

Libxslt is a Libxslt open source XSLT C library developed for the GNOME project. A security vulnerability exists in versions of Libxslt prior to 1.1.43 that stems from reuse after release...

7.8CVSS6.9AI score0.00346EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/03/14 12:00 a.m.9 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2025/03/14 12:00 a.m.12 views

Slackware: Security Advisory (SSA:2025-072-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00346EPSS
SaveExploits4References4
CVE
CVE
added 2025/03/14 12:00 a.m.315 views

CVE-2024-55549

CVE-2024-55549 affects libxslt prior to 1.1.43, with a use-after-free in xsltGetInheritedNsList (exclusion of result prefixes). Multiple advisories (e.g., ALAS/AL2, ALSA, Astra Linux, CBL-Mariner) confirm the issue and list libxslt as vulnerable in affected packages before 1.1.43. The connected d...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits3References2Affected Software1
Debian CVE
Debian CVE
added 2025/03/14 12:00 a.m.11 views

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits3
OSV
OSV
added 2025/03/14 12:00 a.m.9 views

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.5AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2025/03/14 12:00 a.m.12 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.7AI score0.00346EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/03/14 12:00 a.m.36 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS0.00346EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/14 12:00 a.m.9 views

UBUNTU-CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

7.8CVSS6.9AI score0.00346EPSS
SaveExploits3References4
Slackware Linux
Slackware Linux
added 2025/03/13 11:35 p.m.28 views

[slackware-security] libxslt

New libxslt packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxslt-1.1.43-i586-1slack15.0.txz: Upgraded. This update addresses some security issues. Fix use-after-free of XPath context node. F...

7.8CVSS7.8AI score0.00346EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2025/03/13 12:00 a.m.14 views

Slackware Linux 15.0 / current libxslt Multiple Vulnerabilities (SSA:2025-072-01)

The version of libxslt installed on the remote host is prior to 1.1.43. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-072-01 advisory. New libxslt packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

7.8CVSS7AI score0.00346EPSS
SaveExploits4References3
FreeBSD
FreeBSD
added 2025/03/13 12:00 a.m.19 views

libxslt -- multiple vulnerabilities

CVE-2024-55549 Fix UAF related to excluded namespaces xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2025-24855 Fix use-after-free of XPath context node numbers.c in libxslt before 1.1.43 has a use-after-free because , in...

7.8CVSS7.3AI score0.00346EPSS
SaveExploits4References2
Rows per page
Query Builder