Поиск уязвимостей
Количество 11
Количество 11
GHSA-xp26-p53h-6h2p
Improper Neutralization of Input During Web Page Generation in LXML
CVE-2018-19787
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
CVE-2018-19787
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
CVE-2018-19787
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
CVE-2018-19787
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping allowing a remote attacker to conduct XSS attacks as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
CVE-2018-19787
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in th ...
BDU:2019-02732
Уязвимость компонента lxml/html/clean.py модуля lxml.html.clean библиотеки для обработки разметки XML и HTML Lxml, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
ALT-PU-2018-3739
ALT-PU-2018-3739: package `python-module-lxml` update to version 4.2.5-alt1
openSUSE-SU-2022:0803-1
Security update for python-lxml
SUSE-SU-2022:0895-1
Security update for python-lxml
SUSE-SU-2022:0803-1
Security update for python-lxml
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xp26-p53h-6h2p Improper Neutralization of Input During Web Page Generation in LXML | CVSS3: 6.1 | 2% Низкий | больше 4 лет назад |
 | CVE-2018-19787 An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. | CVSS3: 6.1 | 2% Низкий | почти 8 лет назад |
 | CVE-2018-19787 An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. | CVSS3: 4.7 | 2% Низкий | около 8 лет назад |
 | CVE-2018-19787 An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. | CVSS3: 6.1 | 2% Низкий | почти 8 лет назад |
 | CVE-2018-19787 An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping allowing a remote attacker to conduct XSS attacks as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. | CVSS3: 6.1 | 2% Низкий | больше 5 лет назад |
| CVE-2018-19787 An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in th ... | CVSS3: 6.1 | 2% Низкий | почти 8 лет назад |
 | BDU:2019-02732 Уязвимость компонента lxml/html/clean.py модуля lxml.html.clean библиотеки для обработки разметки XML и HTML Lxml, позволяющая нарушителю осуществлять межсайтовые сценарные атаки | CVSS3: 6.1 | 2% Низкий | почти 8 лет назад |
| ALT-PU-2018-3739 ALT-PU-2018-3739: package `python-module-lxml` update to version 4.2.5-alt1 | CVSS3: 6.1 | 2% Низкий | почти 8 лет назад |
 | openSUSE-SU-2022:0803-1 Security update for python-lxml | больше 4 лет назад | ||
| SUSE-SU-2022:0895-1 Security update for python-lxml | больше 4 лет назад | ||
| SUSE-SU-2022:0803-1 Security update for python-lxml | больше 4 лет назад |
Уязвимостей на страницу