https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:32:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-04133 bdu:2015-04133 https://cve.radiocsirt.org/vuln/bdu:2015-04133 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2014-3146 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>Incomplete blacklist vulnerability in the `lxml.html.clean` module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the `clean_html` function.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>Incomplete blacklist vulnerability in the `lxml.html.clean` module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the `clean_html` function.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2014-3146 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/euvd-2026-263920 EUVD-2026-263920 https://cve.radiocsirt.org/vuln/euvd-2026-263920 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3146 <p>Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.</p> <p>Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3146 https://cve.radiocsirt.org/vuln/ghsa-57qw-cc2g-pv5p <p><strong>Affected:</strong> PyPI: lxml</p> <p>Incomplete blacklist vulnerability in the `lxml.html.clean` module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the `clean_html` function.</p> <p><strong>Affected:</strong> PyPI: lxml</p> <p>Incomplete blacklist vulnerability in the `lxml.html.clean` module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the `clean_html` function.</p> https://cve.radiocsirt.org/vuln/ghsa-57qw-cc2g-pv5p https://cve.radiocsirt.org/vuln/gsd-2014-3146 gsd-2014-3146 https://cve.radiocsirt.org/vuln/gsd-2014-3146 https://cve.radiocsirt.org/vuln/pysec-2014-9 <p><strong>Affected:</strong> PyPI: lxml</p> <p>Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.</p> <p><strong>Affected:</strong> PyPI: lxml</p> <p>Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.</p> https://cve.radiocsirt.org/vuln/pysec-2014-9 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3146 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxml</p> <p>Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxml</p> <p>Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3146 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1086 <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1086