Lucene search
+L

143 matches found

Mageia
Mageia
•added 2020/03/06 4:13 p.m.•56 views

Updated python-bleach packages fix security vulnerability

The updated packages fix a security vulnerability: Mutation XSS in bleach.clean when noscript and raw tag whitelisted. CVE-2020-6802...

6.1CVSS1.3AI score0.01731EPSS
SaveExploits2References2
FreeBSD
FreeBSD
•added 2020/02/13 12:00 a.m.•16 views

www/py-bleach -- multiple vulnerabilities

bleach.clean behavior parsing embedded MathML and SVG content with RCDATA tags did not match browser behavior and could result in a mutation XSS. Calls to bleach.clean with strip=False and math or svg tags and one or more of the RCDATA tags script, noscript, style, noframes, iframe, noembed, or x...

2.8AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/09 12:00 a.m.•3 views

CVE-2019-20374: Improper Neutralization of Input During Web Page Generation

A mutation cross-site scripting XSS issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to Remote Code Execution through Mermaid code blocks. To exploit this vulnerability, one must open a file in Typora. The XSS vulnerability is then triggered due to improper HTML...

9.6CVSS8AI score0.023EPSS
SaveExploits0References2
Rows per page
Query Builder