https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:01:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02732 bdu:2019-02732 https://cve.radiocsirt.org/vuln/bdu:2019-02732 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-19787 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-19787 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/euvd-2026-264007 EUVD-2026-264007 https://cve.radiocsirt.org/vuln/euvd-2026-264007 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19787 <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-19787 https://cve.radiocsirt.org/vuln/ghsa-xp26-p53h-6h2p <p><strong>Affected:</strong> PyPI: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> <p><strong>Affected:</strong> PyPI: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> https://cve.radiocsirt.org/vuln/ghsa-xp26-p53h-6h2p https://cve.radiocsirt.org/vuln/gsd-2018-19787 gsd-2018-19787 https://cve.radiocsirt.org/vuln/gsd-2018-19787 https://cve.radiocsirt.org/vuln/msrc_cve-2018-19787 msrc_CVE-2018-19787 https://cve.radiocsirt.org/vuln/msrc_cve-2018-19787 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0803-1 <p>Security update for python-lxml</p> <p>Security update for python-lxml</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0803-1 https://cve.radiocsirt.org/vuln/pysec-2018-12 <p><strong>Affected:</strong> PyPI: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> <p><strong>Affected:</strong> PyPI: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> https://cve.radiocsirt.org/vuln/pysec-2018-12 https://cve.radiocsirt.org/vuln/suse-su-2022:0803-1 <p>Security update for python-lxml</p> <p>Security update for python-lxml</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0803-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19787 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxml, Ubuntu:16.04:LTS: lxml, Ubuntu:18.04:LTS: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxml, Ubuntu:16.04:LTS: lxml, Ubuntu:18.04:LTS: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19787 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1086 <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1086