305 matches found
EulerOS 2.0 SP12 : libxslt (EulerOS-SA-2025-1599)
According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never...
CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
AZL-63777 CVE-2025-5917 affecting package libarchive for versions less than 3.7.7-3
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
DEBIAN-CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
AZL-63756 CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
UBUNTU-CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
libarchive 缓冲区错误漏洞
libarchive is a multi-format archive and compression library open-sourced by libarchive. A buffer error vulnerability exists in libarchive, which stems from a difference-in-one error when handling filename prefixes and suffixes, which can lead to memory corruption...
CVE-2022-1156
The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...
GHSA-7MPR-5M44-H73R markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
CVE-2025-46656
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
CVE-2025-46656
CVE-2025-46656 affects python-markdownify (markdownify) prior to 0.14.1. The flaw allows oversized heading prefixes (e.g., ) which can trigger excessive memory consumption when processing HTML to Markdown. Impact is Low (availability impact listed as Low in CVSS data; local attack vector with low...
python-markdownify 安全漏洞
python-markdownify is a tool for converting HTML to Markdown by Matthew Dapena-Tretter, an individual developer. A security vulnerability exists in python-markdownify versions prior to 0.14.1, which stems from support for oversized title prefixes, which may lead to memory consumption...
CVE-2025-46656
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...
CLSA-2025-1744623757 libxslt: Fix of CVE-2024-55549
CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes...
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...