Lucene search
K

21 matches found

OSV
OSV
added 2026/05/08 5:46 a.m.3 views

BIT-JRE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.1AI score0.00087EPSS
Exploits1References3
OSV
OSV
added 2026/05/06 2:45 p.m.4 views

BIT-JAVA-MIN-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.1AI score0.00087EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.1 views

MiracleLinux 7 : libxslt-1.1.28-6.0.2.el7.AXS7 (AXSA:2025-9856:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9856:03 advisory. CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations CVEs: CVE-2025-24855 numbers.c in libxslt...

7.8CVSS7AI score0.00087EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/06/11 12:0 a.m.5 views

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2025-1621)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00104EPSS
Exploits4References2
RedHat Linux
RedHat Linux
added 2025/05/13 3:59 p.m.5 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
Amazon
Amazon
added 2025/04/16 12:0 a.m.1 views

Important: libxslt

Issue Overview: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2024-55549 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored...

7.8CVSS7AI score0.00104EPSS
Exploits4
RedHat Linux
RedHat Linux
added 2025/04/07 2:23 a.m.4 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 2:20 a.m.2 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 2:2 a.m.3 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 1:56 a.m.4 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 1:38 a.m.4 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
OSV
OSV
added 2025/04/04 10:52 a.m.1 views

CLSA-2025-1743763948 libxslt: Fix of CVE-2025-24855

CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations...

7.8CVSS7.1AI score0.00087EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2025/03/31 2:9 a.m.4 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2025/03/25 7:0 a.m.2 views

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

...

7.8CVSS7AI score0.00087EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/03/25 12:0 a.m.18 views

CBL Mariner 2.0 Security Update: libxslt (CVE-2025-24855)

The version of libxslt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24855 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath...

7.8CVSS7AI score0.00087EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2025/03/24 2:10 p.m.4 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2025/03/14 2:45 p.m.1 views

SUSE CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.5AI score0.00087EPSS
Exploits1References12
OSV
OSV
added 2025/03/14 2:15 a.m.3 views

AZL-58665 CVE-2025-24855 affecting package libxslt for versions less than 1.1.43-1

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS6.8AI score0.00087EPSS
Exploits1References1
OSV
OSV
added 2025/03/14 2:15 a.m.0 views

UBUNTU-CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS6.9AI score0.00087EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/03/14 12:0 a.m.13 views

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00087EPSS
Exploits1References1
Rows per page
Query Builder