Lucene search
+L

624 matches found

OSV
OSV
added 2021/12/13 6:15 p.m.7 views

ALPINE-CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

7.1CVSS6.9AI score0.02477EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/13 6:15 p.m.37 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

7.1CVSS0.4AI score
SaveExploits0References14
OSV
OSV
added 2021/12/13 6:15 p.m.2 views

DEBIAN-CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

7.1CVSS6.2AI score0.02477EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/13 6:15 p.m.33 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS0.02477EPSS
SaveExploits0References14
OSV
OSV
added 2021/12/13 6:15 p.m.12 views

AZL-7025 CVE-2021-43818 affecting package python-lxml for versions less than 4.8.0-1

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

7.1CVSS6.5AI score0.02477EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/13 6:15 p.m.8 views

PYSEC-2021-852

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS5.8AI score0.02477EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/12/13 6:15 p.m.45 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS6.7AI score0.02477EPSS
SaveExploits0References8
Prion
Prion
added 2021/12/13 6:15 p.m.44 views

Hardcoded credentials

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

6.8CVSS6.7AI score0.02477EPSS
SaveExploits0References14Affected Software8
PyPA
PyPA
added 2021/12/13 6:15 p.m.12 views

PYSEC-2021-852

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS5.7AI score0.02477EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/12/13 6:15 p.m.11 views

UBUNTU-CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS6.6AI score0.02477EPSS
SaveExploits0References9
OSV
OSV
added 2021/12/13 6:14 p.m.5 views

GHSA-55X5-FJ6C-H6M8 lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through

Impact The HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5. Patches The issue has been resolved in lxml 4.6.5...

8.2CVSS6.5AI score0.02477EPSS
SaveExploits0References17
Github Security Blog
Github Security Blog
added 2021/12/13 6:14 p.m.90 views

lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through

Impact The HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5. Patches The issue has been resolved in lxml 4.6.5...

8.2CVSS7.5AI score0.02477EPSS
SaveExploits0References17Affected Software1
AlpineLinux
AlpineLinux
added 2021/12/13 6:05 p.m.90 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS7.8AI score0.02477EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2021/12/13 6:05 p.m.3 views

CVE-2021-43818 HTML Cleaner allows crafted and SVG embedded scripts to pass through

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS6.4AI score0.02477EPSS
SaveExploits0References14
Cvelist
Cvelist
added 2021/12/13 6:05 p.m.32 views

CVE-2021-43818 HTML Cleaner allows crafted and SVG embedded scripts to pass through

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS7.7AI score0.02477EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2021/12/13 6:05 p.m.46 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS6.5AI score0.02477EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/12/13 12:00 a.m.7 views

lxml 注入漏洞

Lxml is a personal developer of Lxml can be interacted with Python for locating elements in Html. An injection vulnerability exists in versions of lxml prior to 4.6.5, which stems from the fact that HTML Cleaner allows the passage of certain carefully crafted scripted content, as well as scripted...

8.2CVSS7AI score0.02477EPSS
SaveExploits0References32
Positive Technologies
Positive Technologies
added 2021/12/12 12:00 a.m.6 views

PT-2021-6092 · Lxml +10 · Lxml +10

Name of the Vulnerable Software and Affected Versions: lxml versions prior to 4.6.5 Description: The HTML Cleaner in lxml.html allows certain crafted script content to pass through, as well as script content in SVG files embedded using data URIs. This can be exploited by a remote attacker to...

9.8CVSS6.7AI score0.57499EPSS
SaveExploits13References648
OSV
OSV
added 2021/09/25 2:05 p.m.13 views

OPENSUSE-SU-2021:1310-1 Security update for opera

This update for opera fixes the following issues: opera was updated to version 79.0.4143.22 - CHR-8550 Update chromium on desktop-stable-93-4143 to 93.0.4577.58 - CHR-8557 Update chromium on desktop-stable-93-4143 to 93.0.4577.63 - DNA-94641 Linux Proprietary media codecs not working in snap buil...

8.8CVSS7.5AI score0.0559EPSS
SaveExploits1References20
OSV
OSV
added 2021/08/13 12:15 p.m.7 views

CVE-2021-37349

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database...

7.8CVSS7.3AI score0.00674EPSS
SaveExploits0References1
Rows per page
Query Builder