Export limit exceeded: 30228 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2011-1425

xmlsec1: arbitrary file creation when verifying signatures

xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.

CVSS 2.0 · 5.1 Medium EPSS 8.1% KEV · Not listed
Vendors
Aleksey Apple Redhat
Products
Xml Security Library Webkit Enterprise Linux