CVE-2011-1156

feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...

CVE-2011-1158

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

CVE-2009-5065

CVE-2009-5065 is a cross-site scripting (XSS) vulnerability in the feedparser.py component of Universal Feed Parser (python-feedparser) prior to version 5.0. The flaw allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas. The issue has been disc...

CVE-2011-1157

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...

CVE-2011-1158

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

CVE-2011-1157

CVE-2011-1157 affects Universal Feed Parser (python-feedparser) 5.x up to version 5.0.0, where feedparser.py is vulnerable to cross-site scripting (XSS) via malformed XML comments. An attacker could inject arbitrary web script or HTML through crafted XML comments sent to the parser. Version 5.0.1...

CVE-2011-1156

feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...

CVE-2011-1157

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...

CVE-2011-1158

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

PT-2011-2910

Name of the Vulnerable Software and Affected Versions Universal Feed Parser versions 5.x before 5.0.1 Description A cross-site scripting issue exists due to a vulnerability in the feedparser.py file, allowing remote attackers to inject arbitrary web script or HTML via malformed XML comments...

PT-2011-2909

Name of the Vulnerable Software and Affected Versions Universal Feed Parser versions prior to 5.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing a malformed DOCTYPE declaration. Recommendations For versions prior to...

CVE-2009-5065: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

CVE-2011-1157: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...

PT-2011-1324

Name of the Vulnerable Software and Affected Versions Universal Feed Parser versions prior to 5.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

PT-2011-2911

Name of the Vulnerable Software and Affected Versions Universal Feed Parser versions 5.x before 5.0.1 Description A cross-site scripting issue exists due to an unexpected URI scheme, allowing remote attackers to inject arbitrary web script or HTML, as demonstrated by a javascript: URI...

CVE-2011-1158: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

CVE-2009-5062

IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service daemon crash by subscribing to an Atom feed, aka SPR JRIE7VKMP9...

Code injection

IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service daemon crash by subscribing to an Atom feed, aka SPR JRIE7VKMP9...

CVE-2009-5062

CVE-2009-5062 affects IBM Lotus Quickr 8.1 before 8.1.0.15 on AIX running Lotus Domino services. A remote authenticated user can cause a daemon crash (denial of service) by subscribing to an Atom feed, identified as SPR JRIE7VKMP9. According to the provided data, the CVSSv2 score is 3.5 (Network ...

CVE-2009-5062: Undefined Security Weakness

IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service daemon crash by subscribing to an Atom feed, aka SPR JRIE7VKMP9...