Lucene search
K

398 matches found

PyPA
PyPA
added 2020/12/03 5:15 p.m.6 views

PYSEC-2020-62

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.3AI score0.03934EPSS
Exploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2020/12/03 5:15 p.m.27 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03934EPSS
Exploits1References4
OSV
OSV
added 2020/12/03 5:15 p.m.0 views

UBUNTU-CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03934EPSS
Exploits1References5
OSV
OSV
added 2020/12/03 5:15 p.m.5 views

PYSEC-2020-62

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.9AI score0.03934EPSS
Exploits1References7
Cvelist
Cvelist
added 2020/12/03 4:39 p.m.27 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.5AI score0.03934EPSS
Exploits1References8
CVE
CVE
added 2020/12/03 4:39 p.m.396 views

CVE-2020-27783

The CVE-2020-27783 issue is a XSS vulnerability in python-lxml's HTML Cleaner. The Cleaner’s parser did not sufficiently emulate browsers, causing mismatches between sanitization and the rendered page. This can allow a remote attacker to run arbitrary HTML/JS in a victim’s browser. Affected produ...

6.1CVSS6.4AI score0.03934EPSS
Exploits1References8Affected Software1
Vulnrichment
Vulnrichment
added 2020/12/03 4:39 p.m.2 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.2AI score0.03934EPSS
Exploits1References8
AlpineLinux
AlpineLinux
added 2020/12/03 4:39 p.m.60 views

CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...

6.1CVSS6.8AI score0.03934EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2020/11/25 5:22 p.m.34 views

CVE-2020-27783

A Cross-site Scripting XSS vulnerability was found in the python-lxml's clean module. The module's parser did not properly imitate browsers, causing different behaviors between the sanitizer and the user's page. This flaw allows a remote attacker to run arbitrary HTML/JS code. The highest threat...

6.1CVSS4.4AI score0.03934EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2020/10/30 12:0 a.m.30 views

EulerOS 2.0 SP5 : python-lxml (EulerOS-SA-2020-2296)

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scriptin...

6.1CVSS6.5AI score0.06333EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2020/10/30 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2020-2296)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.06333EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.28 views

EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2020-2236)

According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use...

6.1CVSS6.8AI score0.02438EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/10/21 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2020-2236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.02438EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/10/21 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2020-2235)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.02438EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.29 views

EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2020-2235)

According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use...

6.1CVSS6.8AI score0.06333EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2020/10/18 12:0 a.m.7 views

PT-2020-6224

Name of the Vulnerable Software and Affected Versions python-lxml affected versions not specified Description A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user...

9.8CVSS7.4AI score0.73274EPSS
Exploits17References174
Rockylinux
Rockylinux
added 2020/04/28 8:55 a.m.51 views

python27:2.7 security, bug fix, and enhancement update

An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet,...

9.8CVSS7.6AI score0.07443EPSS
Exploits5
Rockylinux
Rockylinux
added 2019/09/10 3:32 p.m.13 views

python27:2.7 bug fix update

An update is available for python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy,...

0.4AI score
Exploits0
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.76 views

Fedora Update for python-lxml FEDORA-2018-4be0428ab2

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.7AI score0.02438EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2019/01/07 12:0 a.m.36 views

Fedora Update for python-lxml FEDORA-2018-67e98d4b7a

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.02438EPSS
Exploits1References2
Rows per page
Query Builder