Lucene search
+L

73 matches found

OSV
OSV
added 2015/12/28 7:23 p.m.13 views

MGASA-2015-0488 Updated perl-HTML-Scrubber packages fix CVE-2015-5667

Updated perl-HTML-Scrubber package fixes security vulnerability: Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.5AI score0.02092EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/12/15 12:00 a.m.28 views

Amazon Linux AMI : perl-HTML-Scrubber (ALAS-2015-629)

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment. C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

2.6CVSS5.5AI score0.02092EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/12/15 12:00 a.m.16 views

Amazon Linux: Security Advisory (ALAS-2015-629)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS6.5AI score0.02092EPSS
SaveExploits0References2
Amazon
Amazon
added 2015/12/14 12:00 a.m.34 views

Medium: perl-HTML-Scrubber

Issue Overview: Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment. Affected Packages: perl-HTML-Scrubber Issue Correction: Run yum updat...

2.6CVSS5.8AI score0.02092EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/01 12:00 a.m.28 views

Fedora Update for perl-HTML-Scrubber FEDORA-2015-95

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS6.5AI score0.02092EPSS
SaveExploits0References2
Fedora
Fedora
added 2015/11/30 11:52 p.m.26 views

[SECURITY] Fedora 21 Update: perl-HTML-Scrubber-0.15-1.fc21

If you wanna "scrub" or "sanitize" html input in a reliable an flexible fashion, then this module is for you. I wasn't satisfied with HTML::Sanitizer because it is based on HTML::TreeBuilder, so I thought I'd write something similar that works directly with HTML::Parser...

2.6CVSS0.9AI score0.02092EPSS
SaveExploits0
Fedora
Fedora
added 2015/11/30 11:29 p.m.25 views

[SECURITY] Fedora 22 Update: perl-HTML-Scrubber-0.15-1.fc22

If you wanna "scrub" or "sanitize" html input in a reliable an flexible fashion, then this module is for you. I wasn't satisfied with HTML::Sanitizer because it is based on HTML::TreeBuilder, so I thought I'd write something similar that works directly with HTML::Parser...

2.6CVSS0.9AI score0.02092EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/11/11 12:00 a.m.36 views

FreeBSD : p5-HTML-Scrubber -- XSS vulnerability (2f7f4db2-8819-11e5-ab94-002590263bf5)

MITRE reports : Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

2.6CVSS5.5AI score0.02092EPSS
SaveExploits0References5
CNVD
CNVD
added 2015/11/05 12:00 a.m.8 views

HTML-Scrubber module cross-site scripting vulnerability

HTML-Scrubber module is a Perl extension module that can clean up HTML. A cross-site scripting vulnerability exists in versions of HTML-Scrubber module prior to 0.15. This allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.8AI score0.02092EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/11/04 12:00 a.m.37 views

Debian DLA-339-1 : libhtml-scrubber-perl security update

HTML::Scrubber is vulnerable to a cross-site scripting XSS vulnerability when the comment feature is enabled. It allows remote attackers to inject arbitrary web script or HTML via a crafted comment. For Debian 6 squeeze, this has been fixed in libhtml-scrubber-perl version 0.08-4+deb6u1. Cheers,...

2.6CVSS5.2AI score0.02092EPSS
SaveExploits0References3
Debian
Debian
added 2015/11/03 3:50 p.m.44 views

[SECURITY] [DLA 339-1] libhtml-scrubber-perl security update

Package : libhtml-scrubber-perl Version : 0.08-4+deb6u1 CVE ID : CVE-2015-5667 Debian bug : 803943 HTML::Scrubber is vulnerable to a cross-site scripting XSS vulnerability when the comment feature is enabled. It allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.7AI score0.02092EPSS
SaveExploits0
OSV
OSV
added 2015/11/03 12:00 a.m.12 views

DLA-339-1 libhtml-scrubber-perl - security update

Bulletin has no description...

2.6CVSS6.3AI score0.02092EPSS
SaveExploits0
OSV
OSV
added 2015/10/31 4:59 a.m.8 views

DEBIAN-CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.6AI score0.02092EPSS
SaveExploits0References1
OSV
OSV
added 2015/10/31 4:59 a.m.12 views

UBUNTU-CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.9AI score0.02092EPSS
SaveExploits0References5
OSV
OSV
added 2015/10/31 4:59 a.m.14 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

5.4AI score
SaveExploits0References6
NVD
NVD
added 2015/10/31 4:59 a.m.13 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.4AI score0.02092EPSS
SaveExploits0References6
Prion
Prion
added 2015/10/31 4:59 a.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.9AI score0.02092EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2015/10/31 1:00 a.m.26 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

5.3AI score0.02092EPSS
SaveExploits0References6
CVE
CVE
added 2015/10/31 1:00 a.m.77 views

CVE-2015-5667

The HTML-Scrubber Perl module is affected by CVE-2015-5667 (pre-0.15) with XSS via crafted comments when the comment feature is enabled. Connected advisories confirm vendor/ distro fixes (e.g., Mageia and Debian) applying updates to perl-HTML-Scrubber to mitigate the vulnerability. The exact root...

2.6CVSS5.4AI score0.02092EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2015/10/31 1:00 a.m.29 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.4AI score0.02092EPSS
SaveExploits0
Rows per page
Query Builder