Поиск уязвимостей
Количество 39
Количество 39
SUSE-SU-2022:3836-1
Security update for python-lxml
openSUSE-SU-2022:0803-1
Security update for python-lxml
SUSE-SU-2022:0895-1
Security update for python-lxml
SUSE-SU-2022:0803-1
Security update for python-lxml
ALT-PU-2021-5028
ALT-PU-2021-5028: package `python-module-lxml` update to version 4.6.3.0.16.git5ecb40bc-alt1
ELSA-2022-9341
ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The ...
CVE-2021-28957
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
CVE-2021-28957
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
CVE-2021-28957
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
CVE-2021-28957
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
CVE-2021-28957
An XSS vulnerability was discovered in python-lxml's clean module vers ...
SUSE-SU-2022:3461-1
Security update for python3-lxml
SUSE-SU-2022:3460-1
Security update for python3-lxml
RLSA-2021:1898
Moderate: python-lxml security update
GHSA-pgww-xf46-h92r
lxml vulnerable to Cross-site Scripting
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2022:3836-1 Security update for python-lxml | около 4 лет назад | ||
| openSUSE-SU-2022:0803-1 Security update for python-lxml | больше 4 лет назад | ||
| SUSE-SU-2022:0895-1 Security update for python-lxml | больше 4 лет назад | ||
| SUSE-SU-2022:0803-1 Security update for python-lxml | больше 4 лет назад | ||
| ALT-PU-2021-5028 ALT-PU-2021-5028: package `python-module-lxml` update to version 4.6.3.0.16.git5ecb40bc-alt1 | CVSS3: 6.1 | больше 5 лет назад | |
| ELSA-2022-9341 ELSA-2022-9341: ol-automation-manager security update (IMPORTANT) | больше 4 лет назад | ||
 | CVE-2020-27783 A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. | CVSS3: 6.1 | 4% Низкий | почти 6 лет назад |
 | CVE-2020-27783 A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. | CVSS3: 6.1 | 4% Низкий | около 6 лет назад |
 | CVE-2020-27783 A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. | CVSS3: 6.1 | 4% Низкий | почти 6 лет назад |
 | CVE-2020-27783 A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. | CVSS3: 6.1 | 4% Низкий | больше 5 лет назад |
| CVE-2020-27783 A XSS vulnerability was discovered in python-lxml's clean module. The ... | CVSS3: 6.1 | 4% Низкий | почти 6 лет назад |
| CVE-2021-28957 An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. | CVSS3: 6.1 | 4% Низкий | больше 5 лет назад |
| CVE-2021-28957 An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. | CVSS3: 6.1 | 4% Низкий | больше 5 лет назад |
| CVE-2021-28957 An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. | CVSS3: 6.1 | 4% Низкий | больше 5 лет назад |
| CVE-2021-28957 An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. | CVSS3: 6.1 | 4% Низкий | больше 5 лет назад |
| CVE-2021-28957 An XSS vulnerability was discovered in python-lxml's clean module vers ... | CVSS3: 6.1 | 4% Низкий | больше 5 лет назад |
| SUSE-SU-2022:3461-1 Security update for python3-lxml | 4% Низкий | около 4 лет назад | |
| SUSE-SU-2022:3460-1 Security update for python3-lxml | 4% Низкий | около 4 лет назад | |
 | RLSA-2021:1898 Moderate: python-lxml security update | 4% Низкий | больше 5 лет назад | |
| GHSA-pgww-xf46-h92r lxml vulnerable to Cross-site Scripting | CVSS3: 6.1 | 4% Низкий | почти 6 лет назад |
Уязвимостей на страницу