Lucene search
+L

1574 matches found

NVD
NVD
•added 2025/06/16 4:15 p.m.•19 views

CVE-2025-49794

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS0.00833EPSS
SaveExploits0References34
osv_alpine
osv_alpine
•added 2025/06/16 4:15 p.m.•17 views

ALPINE-CVE-2025-49794

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/06/16 4:15 p.m.•14 views

AZL-64127 CVE-2025-49794 affecting package libxml2 for versions less than 2.11.5-6

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/06/16 4:15 p.m.•13 views

UBUNTU-CVE-2025-49795

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

7.5CVSS6.6AI score0.00592EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2025/06/16 4:15 p.m.•11 views

UBUNTU-CVE-2025-49794

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References4
Mend
Mend
•added 2025/06/16 3:24 p.m.•6 views

CVE-2025-49794

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References39
CVE
CVE
•added 2025/06/16 3:24 p.m.•426 views

CVE-2025-49794

CVE-2025-49794 affects libxml2. A memory-safety use-after-free in libxml2 can occur when parsing XPath elements with certain schematron sch:name patterns, potentially crashing the program or causing undefined behavior. The CVSS vectors indicate a critical severity (I/H, A/H) with network access a...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References34
osv_cve
osv_cve
•added 2025/06/16 3:24 p.m.•14 views

CVE-2025-49794 Libxml: heap use after free (uaf) leads to denial of service (dos)

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References39
osv_cve
osv_cve
•added 2025/06/16 3:19 p.m.•15 views

CVE-2025-49795 Libxml: null pointer dereference leads to denial of service (dos)

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

7.5CVSS7AI score
SaveExploits0References12
Cvelist
Cvelist
•added 2025/06/16 3:19 p.m.•34 views

CVE-2025-49795 Libxml: null pointer dereference leads to denial of service (dos)

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

7.5CVSS0.00592EPSS
SaveExploits0References6
Mend
Mend
•added 2025/06/16 3:19 p.m.•6 views

CVE-2025-49795

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

8.7CVSS6.6AI score0.00592EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2025/06/16 3:19 p.m.•12 views

CVE-2025-49795 Libxml: null pointer dereference leads to denial of service (dos)

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

7.5CVSS6.6AI score0.00592EPSS
SaveExploits0References6
AstraLinux
AstraLinux
•added 2025/06/16 11:28 a.m.•11 views

Astra Linux – Vulnerability in Firefox

A vulnerability was identified in Thunderbird, where XPath parsing could trigger undefined behavior due to the lack of null checks during attribute access. This could lead to out-of-bounds read access and, potentially, memory corruption. This vulnerability has been fixed in Firefox 138, Firefox E...

4.8CVSS6.8AI score0.00317EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/16 12:00 a.m.•5 views

CVE-2025-49795: Expired Pointer Dereference

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service...

7.5CVSS6.7AI score0.00592EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/16 12:00 a.m.•6 views

CVE-2025-49794: Expired Pointer Dereference

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

9.1CVSS6.9AI score0.00833EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/06/14 2:54 a.m.•10 views

SUSE CVE-2025-49794

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's...

8.2CVSS6.9AI score0.00833EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE
•added 2025/06/12 12:38 a.m.•18 views

CVE-2025-49795

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service. Mitigation Mitigation is either unavailable or does not meet Red Hat Product Security...

7.5CVSS6.7AI score0.00592EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/06/12 12:00 a.m.•26 views

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2025-1671)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00358EPSS
SaveExploits4References2
Snyk
Snyk
•added 2025/06/11 12:00 a.m.•16 views

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference due to a null pointer dereference while processing XPath XML expressions. An attacker can cause a crash and disrupt service availability by sending specially crafted input that triggers the dereference...

8.7CVSS6.7AI score0.00592EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/06/11 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2025-1621)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00358EPSS
SaveExploits4References2
Rows per page
Query Builder