334 matches found
USN-7601-1 libarchive vulnerabilities
It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. CVE-2025-5914 It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could...
📄 libxslt xsltParseStylesheetProcess Use-After-Free
There is a use-after-free issue in libxslt read on a namespace URL stored in exclPrefixTab. The issue was reproduced on the latest Git version. The proof of concept and ASAN log are provided at the end of the report. There is a use-after-free issue in libxslt read on a namespace URL stored in...
Astra Linux – Vulnerability in libxslt
The xsltGetInheritedNsList function in libxslt before version 1.1.43 has a use-after-free issue related to the exclusion of result prefixes...
Astra Linux – Vulnerability in libarchive
A vulnerability has been identified in the libarchive library. This flaw involves an “off-by-one” calculation error when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. Although seemingly minor, such an overflow can corrupt adjacent memory, resulting in...
EulerOS 2.0 SP12 : libxslt (EulerOS-SA-2025-1599)
According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never...
CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
AZL-63756 CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
DEBIAN-CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
AZL-63777 CVE-2025-5917 affecting package libarchive for versions less than 3.7.7-3
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
UBUNTU-CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
libarchive 缓冲区错误漏洞
libarchive is a multi-format archive and compression library open-sourced by libarchive. A buffer error vulnerability exists in libarchive, which stems from a difference-in-one error when handling filename prefixes and suffixes, which can lead to memory corruption...
CVE-2022-1156
The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
A flaw was found in libxslt. This vulnerability allows an attacker to trigger a use-after-free issue by excluding result prefixes...
markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
GHSA-7MPR-5M44-H73R markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
CVE-2025-46656
python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...
python-markdownify 安全漏洞
python-markdownify is a tool for converting HTML to Markdown by Matthew Dapena-Tretter, an individual developer. A security vulnerability exists in python-markdownify versions prior to 0.14.1, which stems from support for oversized title prefixes, which may lead to memory consumption...
CVE-2025-46656
CVE-2025-46656 affects python-markdownify (markdownify) prior to 0.14.1. The flaw allows oversized heading prefixes (e.g., ) which can trigger excessive memory consumption when processing HTML to Markdown. Impact is Low (availability impact listed as Low in CVSS data; local attack vector with low...