Lucene search
K

398 matches found

Mageia
Mageia
added 2021/01/17 4:7 p.m.41 views

Updated python-lxml packages fix a security vulnerability

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. CVE-2020-27783...

6.1CVSS4.3AI score0.03934EPSS
Exploits1References5
OSV
OSV
added 2021/01/17 4:7 p.m.4 views

MGASA-2021-0038 Updated python-lxml packages fix a security vulnerability

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. CVE-2020-27783...

6.1CVSS6.8AI score0.03934EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2021/01/14 12:0 a.m.12 views

Fedora: Security Advisory for python-lxml (FEDORA-2020-0e055ea503)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.7AI score0.03934EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/01/14 12:0 a.m.9 views

Fedora: Security Advisory for python-lxml (FEDORA-2020-307946cfb6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.7AI score0.03934EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/01/14 12:0 a.m.30 views

Fedora 32 : python-lxml (2020-307946cfb6)

This update fixes mXSS security vulnerability due to the use of improper parser CVE-2020-27783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

6.1CVSS7.3AI score0.03934EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/01/14 12:0 a.m.50 views

Fedora 33 : python-lxml (2020-0e055ea503)

This update fixes mXSS security vulnerability due to the use of improper parser CVE-2020-27783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

6.1CVSS7.3AI score0.03934EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/01/08 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2021-1016)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.7AI score0.03934EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/01/08 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2021-1035)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.7AI score0.03934EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2021/01/07 9:54 p.m.62 views

lxml vulnerable to Cross-site Scripting

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.4AI score0.03934EPSS
Exploits1References16Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.23 views

EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2021-1016)

According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...

6.1CVSS7.2AI score0.03934EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.33 views

EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2021-1035)

According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...

6.1CVSS7.2AI score0.03934EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/12/15 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2020-2529)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.02438EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/12/14 12:0 a.m.26 views

EulerOS 2.0 SP8 : python-lxml (EulerOS-SA-2020-2529)

According to the version of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use...

6.1CVSS6.8AI score0.06333EPSS
Exploits2References2
ArchLinux
ArchLinux
added 2020/12/05 12:0 a.m.184 views

[ASA-202012-1] python-lxml: cross-site scripting

Arch Linux Security Advisory ASA-202012-1 ========================================= Severity: Medium Date : 2020-12-05 CVE-ID : CVE-2020-27783 Package : python-lxml Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1319 Summary ======= The package python-lxml befo...

6.1CVSS0.9AI score0.03934EPSS
Exploits1References3
NVD
NVD
added 2020/12/03 5:15 p.m.21 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03934EPSS
Exploits1References8
OSV
OSV
added 2020/12/03 5:15 p.m.1 views

ALPINE-CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.6AI score0.03934EPSS
Exploits1References1
OSV
OSV
added 2020/12/03 5:15 p.m.5 views

AZL-6807 CVE-2020-27783 affecting package python-lxml for versions less than 4.8.0-1

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS5.9AI score0.03934EPSS
Exploits1References1
OSV
OSV
added 2020/12/03 5:15 p.m.0 views

DEBIAN-CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.5AI score0.03934EPSS
Exploits1References1
OSV
OSV
added 2020/12/03 5:15 p.m.27 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6AI score
Exploits0References8
Prion
Prion
added 2020/12/03 5:15 p.m.42 views

Cross site scripting

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

4.3CVSS6AI score0.03934EPSS
Exploits1References8Affected Software6
Rows per page
Query Builder