Lucene search
+L

305 matches found

Tenable Nessus
Tenable Nessus
added 2025/06/11 12:0 a.m.4 views

EulerOS 2.0 SP12 : libxslt (EulerOS-SA-2025-1599)

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never...

7.8CVSS7.1AI score0.00332EPSS
Exploits4References3
AlpineLinux
AlpineLinux
added 2025/06/09 8:15 p.m.5 views

CVE-2025-5917

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS7.5AI score0.00165EPSS
Exploits0References4
OSV
OSV
added 2025/06/09 8:15 p.m.6 views

AZL-63777 CVE-2025-5917 affecting package libarchive for versions less than 3.7.7-3

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS7.1AI score0.00165EPSS
Exploits0References1
OSV
OSV
added 2025/06/09 8:15 p.m.5 views

DEBIAN-CVE-2025-5917

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS4.8AI score0.00165EPSS
Exploits0References1
OSV
OSV
added 2025/06/09 8:15 p.m.5 views

AZL-63756 CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS6.4AI score0.00165EPSS
Exploits0References1
OSV
OSV
added 2025/06/09 8:15 p.m.5 views

UBUNTU-CVE-2025-5917

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS7.2AI score0.00165EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.5 views

libarchive 缓冲区错误漏洞

libarchive is a multi-format archive and compression library open-sourced by libarchive. A buffer error vulnerability exists in libarchive, which stems from a difference-in-one error when handling filename prefixes and suffixes, which can lead to memory corruption...

5CVSS4.7AI score0.00165EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 11:29 p.m.2 views

CVE-2022-1156

The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS6AI score0.00588EPSS
Exploits2References1
RedHat Linux
RedHat Linux
added 2025/05/13 1:56 p.m.7 views

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...

7.8CVSS7.3AI score0.00332EPSS
Exploits3References5
OSV
OSV
added 2025/04/27 12:30 a.m.12 views

GHSA-7MPR-5M44-H73R markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

2.9CVSS6.7AI score0.00192EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2025/04/27 12:30 a.m.19 views

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

3.3CVSS7AI score0.00192EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/04/26 10:15 p.m.21 views

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

3.3CVSS0.00192EPSS
Exploits1References2
CVE
CVE
added 2025/04/26 12:0 a.m.68 views

CVE-2025-46656

CVE-2025-46656 affects python-markdownify (markdownify) prior to 0.14.1. The flaw allows oversized heading prefixes (e.g., ) which can trigger excessive memory consumption when processing HTML to Markdown. Impact is Low (availability impact listed as Low in CVSS data; local attack vector with low...

3.3CVSS6.8AI score0.00192EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/04/26 12:0 a.m.6 views

python-markdownify 安全漏洞

python-markdownify is a tool for converting HTML to Markdown by Matthew Dapena-Tretter, an individual developer. A security vulnerability exists in python-markdownify versions prior to 0.14.1, which stems from support for oversized title prefixes, which may lead to memory consumption...

3.3CVSS6.3AI score0.00192EPSS
Exploits1References4
OSV
OSV
added 2025/04/26 12:0 a.m.9 views

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

2.9CVSS6.8AI score0.00192EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2025/04/23 11:55 a.m.5 views

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...

7.8CVSS7.3AI score0.00332EPSS
Exploits3References5
OSV
OSV
added 2025/04/14 9:42 a.m.8 views

CLSA-2025-1744623757 libxslt: Fix of CVE-2024-55549

CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes...

7.8CVSS7.1AI score0.00332EPSS
Exploits3References1
RedHat Linux
RedHat Linux
added 2025/04/07 2:23 a.m.13 views

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...

7.8CVSS7.3AI score0.00332EPSS
Exploits3References5
RedHat Linux
RedHat Linux
added 2025/04/07 2:21 a.m.10 views

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...

7.8CVSS7.3AI score0.00332EPSS
Exploits3References5
RedHat Linux
RedHat Linux
added 2025/04/07 2:2 a.m.7 views

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...

7.8CVSS7.3AI score0.00332EPSS
Exploits3References5
Rows per page
Query Builder