1265 matches found
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2021-1839)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : python-lxml (EulerOS-SA-2021-1839)
According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused differe...
USN-4896-2: lxml vulnerability
USN-4896-1 fixed a vulnerability in lxml. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting XSS...
USN-4896-2 lxml vulnerability
USN-4896-1 fixed a vulnerability in lxml. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting XSS...
Ubuntu: Security Advisory (USN-4896-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4896-1: lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting XSS attacks...
USN-4896-1 lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting XSS attacks...
Debian: Security Advisory (DSA-4880-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4880-1 : lxml - security update
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious user to mount a cross-site scripting attack. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : lxml vulnerability (USN-4896-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4896-1 advisory. It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform...
[SECURITY] [DSA 4880-1] lxml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4880-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 29, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4880-1] lxml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4880-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 29, 2021 https://www.debian.org/security/faq -...
DSA-4880-1 lxml - security update
Bulletin has no description...
Debian: Security Advisory (DLA-2606-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2606-1] lxml security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2606-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 24, 2021 https://wiki.debian.org/LTS -...
DLA-2606-1 lxml - security update
Bulletin has no description...
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2021-1701)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : python-lxml (EulerOS-SA-2021-1701)
According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...
a3m (0.1.0), acdh-collatex-utils (>=0.2.0, <=1.3.0) +452 more potentially affected by CVE-2021-28957 via lxml (>=4.0.0, <=4.6.2)
lxml PYPI version =4.0.0, =0.2.0, =1.0.0rc1, =3.0.0, =0.1.0, =0.1.16, =0.7.2, =1.0.1, =1.0.0, =1.1.15, =0.0.5.dev412, =0.0.5.dev432 and more Source cves: CVE-2021-28957 Source advisory: GHSA-JQ4V-F5Q6-MJQQ...
lxml vulnerable to Cross-Site Scripting
An XSS vulnerability was discovered in the python lxml clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run...