527 matches found
Dell OpenManage Server Administrator Local Lift Vulnerability
Dell OpenManage Server Administrator is a server management tool for server monitoring and configuration. Dell OpenManage Server Administrator suffers from a local elevation vulnerability caused by XSL Hijacking, which can be exploited by a low-privileged attacker to elevate to administrator...
PT-2024-27322 · Dell · Dell Openmanage Server Administrator
Name of the Vulnerable Software and Affected Versions: Dell OpenManage Server Administrator versions 11.0.1.0 and prior Description: The issue is a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and...
RHEL 7 : yelp-xsl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jquery-ui: XSS vulnerability in jQuery.ui.dialog title option CVE-2010-5312 - jquery-ui: XSS vulnerabilit...
XML Injection
verapdf is vulnerable to Remote Code Execution RCE. The vulnerability is caused by executing policy checks using custom schematron files, which invokes an XSL transformation that could lead to code execution...
CVE-2024-28109
veraPDF-library is a PDF/A validation library. Executing policy checks using custom schematron files invokes an XSL transformation that could lead to a remote code execution RCE vulnerability. This vulnerability is fixed in 1.24.2...
CVE-2024-28109
CVE-2024-28109 affects veraPDF-library, a PDF/A validation library. Executing policy checks with custom Schematron files triggers an XSL transformation, which can lead to a remote code execution (RCE). Impact is stated as high severity (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). The issue is...
OESA-2024-1308 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin...
OESA-2024-1288 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin...
[SECURITY] Fedora 40 Update: xmlgraphics-commons-2.9-3.fc40
Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D...
[SECURITY] Fedora 40 Update: fop-2.9-6.fc40
FOP is the world's first print formatter driven by XSL formatting objects. It is a Java application that reads a formatting object tree and then turns it into a PDF document. The formatting object tree, can be in the form of an XML document output by an XSLT engine like XT or Xalan or can be pass...
PT-2023-8404 · Htmlunit · Htmlunit
Name of the Vulnerable Software and Affected Versions: HtmlUnit versions prior to 3.9.0 Description: HtmlUnit is a GUI-less browser for Java programs that is vulnerable to Remote Code Execution RCE via XSTL when browsing an attacker's webpage. The reason for the vulnerability is that the FEATURE...
Apigee API Security policies howto
The Genesis of Apigee API Security Guidelines In today's digital epoch, APIs Application Programming Interfaces" have ascended to be the fundamental infrastructure underpinning software development - furnishing the medium for diverse software systems to interact and exchange data. Yet, with this...
CVE-2023-1287
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution...
CVE-2023-1287
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution...
Remote code execution
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution...
CVE-2023-1287 ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution...
CVE-2023-1287 ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution...
CVE-2023-1287
The CVE-2023-1287 entry describes an XSL template injection vulnerability in Dassault Systèmes ENOVIA Live Collaboration V6R2013xE that allows Remote Code Execution. Affected software is ENOVIA Live Collaboration V6R2013xE; root cause is an XSL template vulnerability in the product’s handling of ...
PT-2023-16862 · Dsm · Enovia Live Collaboration
Name of the Vulnerable Software and Affected Versions: ENOVIA Live Collaboration version V6R2013xE Description: An XSL template vulnerability in the software allows Remote Code Execution. Recommendations: For ENOVIA Live Collaboration version V6R2013xE, update to a version that fixes the XSL...
