[SECURITY] Fedora 42 Update: yelp-xsl-42.1-7.fc42

This package contains XSL stylesheets that are used by the yelp help browser...

RHSA-2025:7569 Red Hat Security Advisory: yelp and yelp-xsl security update

Bulletin has no description...

yelp and yelp-xsl security update

yelp 2:3.28.1-3.1 - Fix CVE-2025-3155 RHEL-85922 yelp-xsl 3.28.0-2.1 - Fix CVE-2025-3155 RHEL-85922...

PT-2025-39406

Name of the Vulnerable Software and Affected Versions libxslt affected versions not specified Description A use-after-free issue exists in libxslt during the parsing of xsl nodes. This can result in the dereference of expired pointers, potentially causing application crashes. Recommendations At t...

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

firefox: thunderbird: Use-after-free in XSLT

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash...

CVE-2024-52800

The CVE-2024-52800 issue affects veraPDF: when executing policy checks via the CLI using custom Schematron-based policy files, an XSL transformation may enable a remote code execution (RCE) or XXE-type vector. The vulnerability concerns the policy-check workflow (policy profiles with user-provide...

CVE-2024-52800 Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. This doesn't affect the standard validation and policy checks functionality...

veraPDF-library 代码问题漏洞

veraPDF-library is veraPDF open source an open source PDF/A validation library . A code issue vulnerability exists in veraPDF-library, which stems from the fact that using a custom schematron file enforcement policy check via the CLI invokes an XSL transformation, which could theoretically lead t...

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

openSUSE Security Advisory (SUSE-SU-2024:2039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

CVE-2024-37130

CVE-2024-37130 (Dell OpenManage Server Administrator) is a Local Privilege Escalation via XSL Hijacking . Affected: Dell OpenManage Server Administrator versions 11.0.1.0 and prior . Root cause: an XSL hijack path enabling a local, low-privileged user to escalate to the admin user, potentially le...

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

Dell OpenManage Server Administrator 代码问题漏洞

Dell OpenManage Server Administrator is a server management tool for server monitoring and configuration. Dell OpenManage Server Administrator suffers from a local elevation vulnerability caused by XSL Hijacking, which can be exploited by a low-privileged attacker to elevate to administrator...

Dell OpenManage Server Administrator Local Lift Vulnerability

Dell OpenManage Server Administrator is a server management tool for server monitoring and configuration. Dell OpenManage Server Administrator suffers from a local elevation vulnerability caused by XSL Hijacking, which can be exploited by a low-privileged attacker to elevate to administrator...

PT-2024-27322 · Dell · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Server Administrator versions 11.0.1.0 and prior Description: The issue is a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and...

RHEL 7 : yelp-xsl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jquery-ui: XSS vulnerability in jQuery.ui.dialog title option CVE-2010-5312 - jquery-ui: XSS vulnerabilit...