Lucene search
+L

1238 matches found

SUSE CVE
SUSE CVE
added 2025/10/16 11:38 p.m.2 views

SUSE CVE-2025-11731

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

7.5CVSS6.2AI score0.00264EPSS
Exploits0References11
NVD
NVD
added 2025/10/14 6:15 a.m.7 views

CVE-2025-11731

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS0.00264EPSS
Exploits0References5
OSV
OSV
added 2025/10/14 6:15 a.m.9 views

AZL-70601 CVE-2025-11731 affecting package libxslt for versions less than 1.1.43-3

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS6AI score0.00264EPSS
Exploits0References1
OSV
OSV
added 2025/10/14 6:15 a.m.9 views

AZL-70550 CVE-2025-11731 affecting package libxslt for versions less than 1.1.34-9

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS6AI score0.00264EPSS
Exploits0References1
OSV
OSV
added 2025/10/14 6:15 a.m.5 views

UBUNTU-CVE-2025-11731

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS6AI score0.00264EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/14 6:2 a.m.13 views

CVE-2025-11731 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS0.00264EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/14 6:2 a.m.9 views

EUVD-2025-34140

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS6AI score0.00264EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/14 6:2 a.m.3 views

CVE-2025-11731 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...

3.1CVSS6.1AI score0.00264EPSS
Exploits0References5
CVE
CVE
added 2025/10/14 6:2 a.m.32 views

CVE-2025-11731

CVE-2025-11731 affects libxslt and is triggered by a flaw in exsltFuncResultComp() when handling EXSLT func:result during stylesheet parsing. The issue is a type confusion that may cause memory reads, potentially crashing the application and causing a denial of service. Publicly documented impact...

3.1CVSS6.1AI score0.00264EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Libxslt 安全漏洞

Libxslt is a Libxslt open source XSLT C library developed for the GNOME project. A security vulnerability exists in Libxslt, which stems from improper type handling in the exsltFuncResultComp function when handling the EXSLT func:result element, which could lead to type confusion and trigger...

3.1CVSS6.4AI score0.00264EPSS
Exploits0References3
Snyk
Snyk
added 2025/10/14 12:0 a.m.7 views

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in the exsltFuncResultComp function during the verification of EXSLT . An attacker can cause application crashes or instability by submitting a specially crafted XSL stylesheet...

7.5CVSS5.8AI score0.00264EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/11 3:33 p.m.7 views

EUVD-2025-33864

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

7.5CVSS6.6AI score0.00387EPSS
Exploits1References6
NVD
NVD
added 2025/10/11 1:15 p.m.6 views

CVE-2025-11601

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS0.00387EPSS
Exploits1References5
OSV
OSV
added 2025/10/11 1:15 p.m.7 views

CVE-2025-11601

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS5.8AI score0.00387EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/11 1:2 p.m.18 views

CVE-2025-11601 SourceCodester Online Student Result System login.php sql injection

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

7.5CVSS0.00387EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/11 1:2 p.m.2 views

CVE-2025-11601 SourceCodester Online Student Result System login.php sql injection

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

7.5CVSS6.8AI score0.00387EPSS
Exploits1References5
CVE
CVE
added 2025/10/11 1:2 p.m.20 views

CVE-2025-11601

The CVE-2025-11601 in SourceCodester Online Student Result System 1.0 is triggered via SQL injection in /login.php by manipulating the Username parameter. The vulnerability is exploitable remotely, with multiple sources indicating a publicly available exploit. Affected component is the login auth...

9.8CVSS7.3AI score0.00387EPSS
Exploits1References5Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/10/11 1:1 a.m.6 views

nvmet: always initialize cqe.result

...

5.5CVSS7AI score0.00256EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.9 views

PT-2025-41688

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Result System version 1.0 Description A SQL injection issue exists in the SourceCodester Online Student Result System 1.0. The flaw is located in the /login.php script, where manipulating the Username parameter ca...

7.5CVSS7.9AI score0.00387EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.6 views

SourceCodester Online Student Result System SQL注入漏洞

SourceCodester Online Student Result System is a SourceCodester open source online student result system. A SQL injection vulnerability exists in SourceCodester Online Student Result System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /login.php,...

9.8CVSS7.8AI score0.00387EPSS
Exploits1References5
Rows per page
Query Builder