https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:01:10.966983+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02732 bdu:2019-02732 2026-10-02T18:01:10.984527+00:00 bdu:2019-02732 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-19787 BREW-ansible-CVE-2018-19787 — Improper Neutralization of Input During Web Page Generation in LXML 2026-10-02T18:01:10.984561+00:00

Affected: Homebrew: ansible

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 certfr-2024-avi-0385 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-02T18:01:10.984594+00:00 certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/euvd-2026-264007 EUVD-2026-264007 2026-10-02T18:01:10.984612+00:00 EUVD-2026-264007 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19787 fkie_cve-2018-19787 2026-10-02T18:01:10.984623+00:00

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.

 https://cve.radiocsirt.org/vuln/ghsa-xp26-p53h-6h2p GHSA-xp26-p53h-6h2p — Improper Neutralization of Input During Web Page Generation in LXML 2026-10-02T18:01:10.984644+00:00

Affected: PyPI: lxml

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.

 https://cve.radiocsirt.org/vuln/gsd-2018-19787 gsd-2018-19787 2026-10-02T18:01:10.984664+00:00 gsd-2018-19787 https://cve.radiocsirt.org/vuln/msrc_cve-2018-19787 msrc_CVE-2018-19787 — An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascri… 2026-10-02T18:01:10.984674+00:00 msrc_CVE-2018-19787 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0803-1 openSUSE-SU-2022:0803-1 — Security update for python-lxml 2026-10-02T18:01:10.984689+00:00

Security update for python-lxml

 https://cve.radiocsirt.org/vuln/pysec-2018-12 PYSEC-2018-12 2026-10-02T18:01:10.984705+00:00

Affected: PyPI: lxml

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.

 https://cve.radiocsirt.org/vuln/suse-su-2022:0803-1 SUSE-SU-2022:0803-1 — Security update for python-lxml 2026-10-02T18:01:10.984723+00:00

Security update for python-lxml

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19787 UBUNTU-CVE-2018-19787 2026-10-02T18:01:10.984737+00:00

Affected: Ubuntu:14.04:LTS: lxml, Ubuntu:16.04:LTS: lxml, Ubuntu:18.04:LTS: lxml

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1086 WID-SEC-W-2024-1086 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T18:01:10.984757+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.