203 matches found
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2023-2401)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-2309
creationtimestamp| type| source ---|---|--- 2023-07-24 14:25:57+00:00| seen| https://t.me/cibsecurity/67143...
CVE-2023-2309
The CVE-2023-2309 entry corresponds to a Reflected Cross-Site Scripting flaw in the WordPress wpForo Forum plugin prior to 2.1.9. The vulnerability arises from insufficient input sanitization and output escaping in the wpforo_debug function, allowing unauthenticated attackers to inject script whe...
WordPress wpForo Forum Plugin < 2.1.9 is vulnerable to Cross Site Scripting (XSS)
Software wpForo Forum Type Plugin Vulnerable versions 2.1.9 Fixed in 2.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2309 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f15f5dd16590 Credits Alex Sanford Required privile...
EulerOS Virtualization 3.0.6.0 : python2-lxml (EulerOS-SA-2023-2203)
According to the versions of the python2-lxml packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is...
Huawei EulerOS: Security Advisory for python2-lxml (EulerOS-SA-2023-2203)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-6028-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6028-2: libxml2 vulnerabilities
USN-6028-1 fixed vulnerabilities in libxml2. This update provides the corresponding updates for Ubuntu 23.04. Original advisory details: It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. CVE-2022-2309 It was discovere...
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2023-1717)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.0 : python-lxml (EulerOS-SA-2023-1717)
According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is...
Updated libxml2 packages fix security vulnerability
NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...
SUSE CVE-2015-2309
unknown...
PT-2023-2309 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows kernel, allowing an attacker to elevate their privileges. This can impact the system, potentially enabling unauthorized...
Important: python-lxml
Issue Overview: There's a flaw in python-lxml's HTML Cleaner component, which is responsible for sanitizing HTML and Javascript. An attacker who is able to submit a crafted payload to a web service using python-lxml's HTML Cleaner may be able to trigger script execution in clients such as web...
Amazon Linux 2023 : python3-lxml (ALAS2023-2023-034)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-034 advisory. There's a flaw in python-lxml's HTML Cleaner component, which is responsible for sanitizing HTML and Javascript. An attacker who is able to submit a crafted payload to a web service using...
CBL Mariner 2.0 Security Update: libxml2 / python-lxml (CVE-2022-2309)
The version of libxml2 / python-lxml installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2309 advisory. - NULL Pointer Dereference allows attackers to cause a denial of service or application crash...
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2023-1286)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2309
Unsafe methods in the Request class...
USN-5760-1: libxml2 vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. CVE-2022-2309 It was discovered that libxml2...
Amazon Linux 2022 : python3-lxml (ALAS2022-2023-264)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2023-264 advisory. NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier ar...