Lucene search
GoogleOSV:PSF-2019-6HistorySep 28, 2019 - 1:33 a.m.
Reflected XSS in DocXMLRPCServer
2019-09-2801:33:02
Google
osv.dev
14
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
References
Related
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : python Vulnerability (NS-SA-2020-0002)
2020-01-20 00:00:00
RHEL 7 : python (RHSA-2020:3911)
2020-11-19 00:00:00
CentOS 7 : python (CESA-2020:3911)
2020-11-30 00:00:00
cvelist
cvelist
CVE-2019-16935
2019-09-28 01:33:02
ibm
ibm
nvd
nvd
CVE-2019-16935
2019-09-28 02:15:10
openvas
openvas
veracode
veracode
Cross-Site Scripting (XSS)
2020-05-10 23:24:03
redhat
redhat
(RHSA-2020:3911) Moderate: python security update
2020-09-29 07:42:55
(RHSA-2020:3888) Moderate: python3 security update
2020-09-29 07:40:56
(RHSA-2020:4433) Moderate: python3 security and bug fix update
2020-11-03 12:04:08
osv
osv
Regular Expression Denial of Service in http.cookiejar
2019-11-14 00:00:00
CVE-2019-16935
2019-09-28 02:15:10
python2.7 - security update
2021-04-17 00:00:00
alpinelinux
alpinelinux
CVE-2019-16935
2019-09-28 02:15:10
f5
f5
K000134818 : Python XML RPC vulnerability CVE-2019-16935
2023-05-26 00:00:00
symantec
symantec
Python CVE-2019-16935 CRLF Multiple Cross Site Scripting Vulnerabilities
2019-09-30 00:00:00
cve
cve
CVE-2019-16935
2019-09-28 02:15:10
redhatcve
redhatcve
CVE-2019-16935
2020-03-29 02:10:40
prion
prion
Input validation
2019-09-28 02:15:00
debiancve
debiancve
CVE-2019-16935
2019-09-28 02:15:10
ubuntucve
ubuntucve
CVE-2019-16935
2019-09-28 00:00:00
hackerone
hackerone
Internet Bug Bounty: A reflected XSS in python/Lib/DocXMLRPCServer.py
2019-10-01 14:21:18
centos
centos
python, tkinter security update
2020-10-20 18:48:10
python3 security update
2020-10-20 18:48:39
amazon
amazon
Medium: python27, python35, python36
2020-02-10 23:33:00
debian
debian
[SECURITY] [DLA 2628-1] python2.7 security update
2021-04-17 19:31:24
[SECURITY] [DLA 2280-1] python3.5 security update
2020-07-15 10:00:36
fedora
fedora
[SECURITY] Fedora 31 Update: python36-3.6.10-1.fc31
2020-01-12 01:46:59
[SECURITY] Fedora 30 Update: python36-3.6.10-1.fc30
2020-01-12 01:16:42
[SECURITY] Fedora 30 Update: python2-2.7.17-1.fc30
2019-11-09 22:39:56
cloudfoundry
cloudfoundry
USN-4151-1: Python vulnerabilities | Cloud Foundry
2019-11-06 00:00:00
ubuntu
ubuntu
Python vulnerabilities
2019-10-09 00:00:00
Python vulnerabilities
2019-10-10 00:00:00
Python vulnerabilities
2024-07-11 00:00:00
suse
suse
Security update for python3 (moderate)
2019-11-05 00:00:00
Security update for python3 (moderate)
2019-11-09 00:00:00
Security update for python (moderate)
2019-10-27 00:00:00
oraclelinux
oraclelinux
python3 security update
2020-10-06 00:00:00
python security update
2020-10-06 00:00:00
python3 security and bug fix update
2020-11-10 00:00:00
almalinux
almalinux
Moderate: python3 security and bug fix update
2020-11-03 12:04:08
mageia
mageia
Updated python packages fix security vulnerabilities
2019-11-08 02:36:48
rocky
rocky
python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
photon
photon
Critical Photon OS Security Update - PHSA-2019-3.0-0035
2019-10-18 00:00:00
Critical Photon OS Security Update - PHSA-2019-0035
2019-10-18 00:00:00