Lucene search
K

6 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в openjdk-11, bcel

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.10953EPSS
Exploits2References1
NVD
NVD
added 2025/09/26 9:15 a.m.3 views

CVE-2025-60145

Cross-Site Request Forgery CSRF vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through = 1.2...

4.3CVSS0.00016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.1 views

CVE-2025-60145 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through = 1.2...

4.3CVSS5.1AI score0.00016EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.2 views

PT-2025-39588

Name of the Vulnerable Software and Affected Versions yonifre Lenix scss compiler versions n/a through 1.2 Description A Cross-Site Request Forgery CSRF issue exists in the yonifre Lenix scss compiler. This allows attackers to perform actions on behalf of authenticated users. Recommendations At t...

4.3CVSS6.3AI score0.00016EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/07/21 3:29 p.m.2 views

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.10953EPSS
Exploits2References4
UbuntuCve
UbuntuCve
added 2009/04/22 12:0 a.m.22 views

CVE-2009-1302

The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors related to 1 nsAsyncInstantiateEvent::Run, 2...

5CVSS7.2AI score0.04391EPSS
Exploits1References2
Rows per page
Query Builder