Lucene search
+L

1070 matches found

OSV
OSV
added 2021/03/09 8:15 p.m.40 views

CVE-2021-21300

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

7.5CVSS1.4AI score
SaveExploits0References14
Prion
Prion
added 2021/03/09 8:15 p.m.61 views

Design/Logic Flaw

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

5.1CVSS7.4AI score0.88533EPSS
SaveExploits5References14Affected Software4
OSV
OSV
added 2021/03/09 6:00 p.m.25 views

UBUNTU-CVE-2021-21300

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

8CVSS7AI score0.88533EPSS
SaveExploits5References3
RedHat Linux
RedHat Linux
added 2021/03/09 4:10 p.m.42 views

python-bleach: Mutation cross-site scripting in bleach.clean

A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument stripcomments=False Note: none of the above tags are in the default allowe...

6.1CVSS5.8AI score0.00483EPSS
SaveExploits1References5
CVE
CVE
added 2021/03/09 12:00 a.m.1064 views

CVE-2021-21300

Summary: CVE-2021-21300 affects Git when cloning into case-insensitive file systems and using certain clean/smudge filters (e.g., Git LFS). A specially crafted repository containing symbolic links and files processed by these filters can cause an unchecked script to run during checkout. Affected ...

8CVSS7.7AI score0.88533EPSS
SaveExploits5References14Affected Software1
OSV
OSV
added 2021/03/05 11:04 a.m.6 views

OESA-2021-1068 python-lxml security update

The lxml XML toolkit is a Pythonic binding for the C libraries libxml2 and libxslt. It is unique in that it combines the speed and XML feature completeness of these libraries with the simplicity of a native Python API, mostly compatible but superior to the well-known ElementTree API. The latest...

6.1CVSS6.6AI score0.03982EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/02/10 12:00 a.m.10 views

PT-2021-15584 · Mcafee · Mcafee Endpoint Security (Ens) For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: The issue allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be...

8.2CVSS5.5AI score0.00288EPSS
SaveExploits0References3
PyPA
PyPA
added 2021/02/02 5:58 p.m.13 views

PYSEC-2021-865

In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with stripcomments=False...

6.1CVSS6.3AI score0.00483EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:00 a.m.40 views

EulerOS 2.0 SP8 : python-lxml (EulerOS-SA-2021-1166)

According to the version of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...

6.1CVSS7.2AI score0.03982EPSS
SaveExploits1References2
Akamai Blog
Akamai Blog
added 2021/01/29 1:05 p.m.46 views

Sustainability Requires Collaboration: Akamai's Growing Community and Supply Chain Initiatives

picture courtesy of One Tree Planted Akamai is committed to collaboration that inspires worldwide change. We know it's not enough to be environmentally conscious solely in our own business. To make a true impact on climate change, we need to use our unique position as a global corporation to...

0.5AI score
SaveExploits0
Citrix
Citrix
added 2021/01/26 12:00 a.m.16 views

Unable to unistall VDA software, error - ‘Supportability tools fail with internal error code 1719, failing action was “WixQueryOSInfo”

-When the customer tries toremove the VDA from Programs and Features and get error ‘Supportability tools fail with internal error code 1719, failing action was “WixQueryOSInfo”’ and referred to the CTX about troubleshooting MSI installation issues,https://support.citrix.com/article/CTX226932 -If...

7.3AI score
SaveExploits0
Mageia
Mageia
added 2021/01/17 4:07 p.m.82 views

Updated python-lxml packages fix a security vulnerability

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. CVE-2020-27783...

6.1CVSS4.3AI score0.03982EPSS
SaveExploits1References5
OSV
OSV
added 2021/01/07 9:54 p.m.12 views

GHSA-PGWW-XF46-H92R lxml vulnerable to Cross-site Scripting

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03982EPSS
SaveExploits1References17
Akamai Blog
Akamai Blog
added 2021/01/05 2:00 p.m.52 views

Keeping Emissions in Check During Unprecedented Internet Use

As I reflect on 2020 and the way in which the pandemic affected the business world, what stands out to me is the incredible increase in streaming content consumed on the internet. We've seen launches of some of the highest-profile streaming services to date between late 2019 and 2020. People are...

0.4AI score
SaveExploits0
OSV
OSV
added 2020/12/03 5:15 p.m.7 views

ALPINE-CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.6AI score0.03982EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/03 5:15 p.m.2 views

DEBIAN-CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.5AI score0.03982EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/03 5:15 p.m.31 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03982EPSS
SaveExploits1References8
OSV
OSV
added 2020/12/03 5:15 p.m.12 views

AZL-6807 CVE-2020-27783 affecting package python-lxml for versions less than 4.8.0-1

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS5.9AI score0.03982EPSS
SaveExploits1References1
PyPA
PyPA
added 2020/12/03 5:15 p.m.13 views

PYSEC-2020-62

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.3AI score0.03982EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2020/12/03 5:15 p.m.36 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03982EPSS
SaveExploits1References4
Rows per page
Query Builder