52 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-19787
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a...
RHEL 6 : python-lxml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: XSS in lxml.html.clean module in lxml/html/clean.py CVE-2018-19787 - Incomplete blacklist...
RHEL 7 : python-lxml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: XSS in lxml.html.clean module in lxml/html/clean.py CVE-2018-19787 - Incomplete blacklist...
RHEL 5 : python-lxml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: XSS in lxml.html.clean module in lxml/html/clean.py CVE-2018-19787 - Incomplete blacklist...
RHEL 6 : python-lxml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 - An iss...
RHEL 5 : python-lxml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: mXSS due to the use of improper parser CVE-2020-27783 - An issue was discovered in lxml befo...
RHEL 7 : python-lxml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 - An iss...
aeat-web-services (>=1.0.0rc1, <=2.0.2), ansible-playbook-grapher (>=0.7.2, <=0.7.3) +80 more potentially affected by CVE-2018-19787 via lxml (>=4.0.0, <=4.2.4)
lxml PYPI version =4.0.0, =1.0.0rc1, =0.7.2, =1.2.0, =0.7.1, =1.2018.7.26, =0.3.0, =0.28.0, =0.1.5, =0.0.14, =1.0.1, =0.2.1, =0.0.5.1, =2.2.0.17112621, =2.2.0.17112818, =2.2.7.18062908 and more Source cves: CVE-2018-19787 Source advisory: GHSA-XP26-P53H-6H2P...
elifearticle (0.1.1), elifedbtools (0.0.1) +1 more potentially affected by CVE-2018-19787 via lxml (3.4.1)
lxml PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - elifearticle 0.1.1 - elifedbtools 0.0.1 - elifetools =0.1.2, =0.1.7 Source cves: CVE-2018-19787 Source advisory: OSV:GHSA-XP26-P53H-6H2P...
beu (>=0.1.0, <=0.1.1), c2cwsgiutils (>=0.2.0, <=0.3.2) +3 more potentially affected by CVE-2018-19787 via lxml (3.7.2)
lxml PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - beu =0.1.0, =0.2.0, =0.1.0, =0.1.1, =0.1.3 Source cves: CVE-2018-19787 Source advisory: OSV:GHSA-XP26-P53H-6H2P...
bormeparser (0.2.4), bsxprinter (>=0.2.0, <=0.4.0) +16 more potentially affected by CVE-2018-19787 via lxml (3.6.4)
lxml PYPI version 3.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - bormeparser 0.2.4 - bsxprinter =0.2.0, =0.1.0, =0.1.1, =0.6.12a2, =1.5.9, =0.1.1, =0.1.3 and more Source cves: CVE-2018-19787 Source advisory:...
adamalib (0.1.0), bormeparser (>=0.1.1, <=0.2.3) +23 more potentially affected by CVE-2018-19787 via lxml (3.4.4)
lxml PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - adamalib 0.1.0 - bormeparser =0.1.1, =2.0.1.16012810, =2.0.1.16012810, =2.0.1.16012810, =1.0.1, =2.0.2.16012810, =2.0.1.15101417, =2.0.1.15101417,...
aeat-web-services (>=1.0.0rc1, <=2.0.2), ansible-playbook-grapher (>=0.7.2, <=0.7.3) +80 more potentially affected by CVE-2018-19787 via lxml (>=4.0.0, <=4.2.4)
lxml PYPI version =4.0.0, =1.0.0rc1, =0.7.2, =1.2.0, =0.7.1, =1.2018.7.26, =0.3.0, =0.28.0, =0.1.5, =0.0.14, =1.0.1, =0.2.1, =0.0.5.1, =2.2.0.17112621, =2.2.0.17112818, =2.2.7.18062908 and more Source cves: CVE-2018-19787 Source advisory: OSV:GHSA-XP26-P53H-6H2P...
bioc (>=1.1.0.dev1, <=1.1.0.dev2), biweeklybudget (>=0.1.0, <=0.7.0) +13 more potentially affected by CVE-2018-19787 via lxml (3.7.3)
lxml PYPI version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - bioc =1.1.0.dev1, =0.1.0, =0.3.3, =1.1.3.0, =0.6.14, =1.0.0, =0.1.4, =0.1.5 - pyodata 1.1.1 - readembedability 1.6.0 - sfmc 0.1.2 - sirbot-plugins 0.1.2...
django-transcribe (>=0.3.5, <=0.5.17), odooku-odoo-account-invoicing (>=11.0.0, <=11.0.6) +35 more potentially affected by CVE-2018-19787 via lxml (3.5.0)
lxml PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - django-transcribe =0.3.5, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0, =11.0.0,...
CVE-2018-19787 affecting package python-lxml for versions less than 4.8.0-1
CVE-2018-19787 affecting package python-lxml for versions less than 4.8.0-1. An upgraded version of the package is available that resolves this issue...
openSUSE: Security Advisory for python-lxml (openSUSE-SU-2022:0803-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15 / SLES15 Security Update : python-lxml (SUSE-SU-2022:0803-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0803-1 advisory. - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remo...
OPENSUSE-SU-2022:0803-1 Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL bsc1118088. - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped bsc1184177. - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data...