Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-3146
HistoryMay 14, 2014 - 7:55 p.m.

Cross site scripting

2014-05-1419:55:00
PRIOn knowledge base
www.prio-n.com
6

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.6%

JSON

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.

CPENameOperatorVersion
lxmleq2.1.4
lxmleq2.0.8
lxmleq2.1.1
lxmleq1.1.2
lxmleq3.1.2
lxmleq3.2.1
lxmleq2.0.1
lxmleq3.3.0 beta1
lxmleq3.1 beta1
lxmleq3.3.3
Rows per page:
1-10 of 951

Related

openvas 17
osv 7
debiancve 2
nessus 19
cve 2
debian 4
ubuntu 1
ubuntucve 2
github 2
mageia 1
redhatcve 1
prion 1
securityvulns 1
openvas
openvas
Debian Security Advisory DSA 2941-1 (lxml - security update)
2014-06-01 00:00:00
Debian: Security Advisory (DSA-2941-1)
2014-05-31 00:00:00
Mageia: Security Advisory (MGASA-2014-0218)
2022-01-28 00:00:00
osv
osv
lxml - security update
2014-06-01 00:00:00
lxml - security update
2014-06-26 00:00:00
PYSEC-2014-9
2014-05-14 19:55:00
debiancve
debiancve
CVE-2014-3146
2014-05-14 19:55:00
CVE-2018-19787
2018-12-02 10:29:00
nessus
nessus
Mandriva Linux Security Advisory : python-lxml (MDVSA-2015:112)
2015-03-30 00:00:00
openSUSE Security Update : python-lxml (openSUSE-SU-2014:0735-1)
2014-06-13 00:00:00
SuSE 11.3 Security Update : python-lxml (SAT Patch Number 9821)
2014-10-11 00:00:00
cve
cve
CVE-2014-3146
2014-05-14 19:55:00
CVE-2018-19787
2018-12-02 10:29:00
debian
debian
lxml security update
2014-06-26 17:10:22
lxml security update
2014-06-26 17:16:35
[SECURITY] [DSA 2941-1] lxml security update
2014-06-01 08:36:18
ubuntu
ubuntu
lxml vulnerability
2014-05-21 00:00:00
ubuntucve
ubuntucve
CVE-2014-3146
2014-05-14 00:00:00
CVE-2018-19787
2018-12-02 00:00:00
github
github
lxml Cross-site Scripting Via Control Characters
2022-05-14 04:01:59
Improper Neutralization of Input During Web Page Generation in LXML
2022-05-13 01:13:21
mageia
mageia
Updated python-lxml package fix CVE-2014-3146
2014-05-15 02:10:47
redhatcve
redhatcve
CVE-2018-19787
2018-12-17 23:08:11
prion
prion
Design/Logic Flaw
2018-12-02 10:29:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-10 00:00:00

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.6%

JSON
Related for PRION:CVE-2014-3146
openvas17osv7debiancve2nessus19cve2debian4ubuntu1ubuntucve2github2mageia1redhatcve1prion1securityvulns1