Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3146
HistoryMay 14, 2014 - 12:00 a.m.

CVE-2014-3146

2014-05-1400:00:00
ubuntu.com
ubuntu.com
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.7%

JSON

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml
before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS)
attacks via control characters in the link scheme to the clean_html
function.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlxml< 2.3.2-1ubuntu0.2UNKNOWN
ubuntu13.10noarchlxml< 3.2.0-1ubuntu0.1UNKNOWN
ubuntu14.04noarchlxml< 3.3.3-1ubuntu0.1UNKNOWN

Related

openvas 17
prion 2
osv 7
debiancve 2
nessus 19
cve 2
debian 4
ubuntu 1
github 2
mageia 1
redhatcve 1
ubuntucve 1
securityvulns 1
openvas
openvas
Debian Security Advisory DSA 2941-1 (lxml - security update)
2014-06-01 00:00:00
Debian: Security Advisory (DSA-2941-1)
2014-05-31 00:00:00
Mageia: Security Advisory (MGASA-2014-0218)
2022-01-28 00:00:00
prion
prion
Cross site scripting
2014-05-14 19:55:00
Design/Logic Flaw
2018-12-02 10:29:00
osv
osv
lxml - security update
2014-06-01 00:00:00
lxml - security update
2014-06-26 00:00:00
PYSEC-2014-9
2014-05-14 19:55:00
debiancve
debiancve
CVE-2014-3146
2014-05-14 19:55:00
CVE-2018-19787
2018-12-02 10:29:00
nessus
nessus
Mandriva Linux Security Advisory : python-lxml (MDVSA-2015:112)
2015-03-30 00:00:00
openSUSE Security Update : python-lxml (openSUSE-SU-2014:0735-1)
2014-06-13 00:00:00
SuSE 11.3 Security Update : python-lxml (SAT Patch Number 9821)
2014-10-11 00:00:00
cve
cve
CVE-2014-3146
2014-05-14 19:55:00
CVE-2018-19787
2018-12-02 10:29:00
debian
debian
lxml security update
2014-06-26 17:10:22
lxml security update
2014-06-26 17:16:35
[SECURITY] [DSA 2941-1] lxml security update
2014-06-01 08:36:18
ubuntu
ubuntu
lxml vulnerability
2014-05-21 00:00:00
github
github
lxml Cross-site Scripting Via Control Characters
2022-05-14 04:01:59
Improper Neutralization of Input During Web Page Generation in LXML
2022-05-13 01:13:21
mageia
mageia
Updated python-lxml package fix CVE-2014-3146
2014-05-15 02:10:47
redhatcve
redhatcve
CVE-2018-19787
2018-12-17 23:08:11
ubuntucve
ubuntucve
CVE-2018-19787
2018-12-02 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2014-05-10 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.7%

JSON
Related for UB:CVE-2014-3146
openvas17prion2osv7debiancve2nessus19cve2debian4ubuntu1github2mageia1redhatcve1ubuntucve1securityvulns1