Lucene search
+L

32484 matches found

NVD
NVD
added 2024/02/04 4:15 p.m.31 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS7.5AI score0.01364EPSS
SaveExploits3References4
OSV
OSV
added 2024/02/04 4:15 p.m.10 views

AZL-34961 CVE-2024-25062 affecting package libxml2 for versions less than 2.11.5-4

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS6.7AI score0.01364EPSS
SaveExploits3References1
OSV
OSV
added 2024/02/04 4:15 p.m.6 views

ALPINE-CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS7AI score0.01364EPSS
SaveExploits3References1
UbuntuCve
UbuntuCve
added 2024/02/04 4:15 p.m.385 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS6.8AI score0.01364EPSS
SaveExploits3References3
Prion
Prion
added 2024/02/04 4:15 p.m.37 views

Design/Logic Flaw

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

5CVSS7AI score0.01364EPSS
SaveExploits3References2Affected Software1
OSV
OSV
added 2024/02/04 4:15 p.m.6 views

UBUNTU-CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS6.8AI score0.01364EPSS
SaveExploits3References4
Vulnrichment
Vulnrichment
added 2024/02/04 12:00 a.m.6 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.7AI score0.01364EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2024/02/04 12:00 a.m.72 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.7AI score0.01364EPSS
SaveExploits3References2
OSV
OSV
added 2024/02/04 12:00 a.m.38 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS6.6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.7 views

PT-2024-1711

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.11.7 and earlier libxml2 versions 2.12.x through 2.12.4 Description A use-after-free flaw was found in the xmlValidatePopElement function of the libxml2 library when using the XML Reader interface with DTD validation and...

7.8CVSS6.4AI score0.01364EPSS
SaveExploits3References103
AlpineLinux
AlpineLinux
added 2024/02/04 12:00 a.m.145 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS6.8AI score0.01364EPSS
SaveExploits3
CVE
CVE
added 2024/02/04 12:00 a.m.1225 views

CVE-2024-25062

CVE-2024-25062 : Affects libxml2 prior to 2.11.7 and 2.12.x prior to 2.12.5. When using the XML Reader with DTD validation and XInclude expansion, crafted XML can trigger an xmlValidatePopElement use-after-free, as described in multiple connected sources. Impact is described as an availability co...

7.5CVSS7.4AI score0.01364EPSS
SaveExploits3References4Affected Software1
Debian CVE
Debian CVE
added 2024/02/04 12:00 a.m.378 views

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free...

7.5CVSS6.8AI score0.01364EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/02/04 12:00 a.m.31 views

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2024-035-01)

The version of libxml2 installed on the remote host is prior to 2.11.7 / 2.12.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-035-01 advisory. - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD...

7.5CVSS6.7AI score0.01364EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
added 2024/01/31 12:00 a.m.12 views

The vulnerability of the jpegxl_anim_read_packet() function in the JPEG XL decoder allows a hacker to execute arbitrary code.

The vulnerability of the jpegxlanimreadpacket function in the JPEG XL decoder, a multimedia library from FFmpeg, is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

7.5CVSS8.3AI score0.0113EPSS
SaveExploits0References8Affected Software1
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.19 views

Fedora: Security Advisory (FEDORA-2024-73d5220ed3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01946EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.15 views

Fedora: Security Advisory for zbar (FEDORA-2024-583e4098b9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.01946EPSS
SaveExploits0References2
Metasploit
Metasploit
added 2024/01/17 7:50 p.m.162 views

Ansible Playbook Error Message File Reader

This module will read the first line of a file based on an error message from ansible-playbook with sudo privileges. ansible-playbook takes a yaml file as input, and if there is an error, such as a non-yaml file, it outputs the line where the error occurs. This can be exploited to read the first...

6.8AI score
SaveExploits0
OSV
OSV
added 2024/01/16 9:15 a.m.8 views

CVE-2023-52114

Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity...

7.5CVSS5.8AI score0.00277EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/15 1:15 p.m.24 views

CVE-2024-20721

Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...

5.5CVSS5.4AI score0.0072EPSS
SaveExploits0References1
Rows per page
Query Builder