python-lxml vulnerabilities (Red Hat)
151 vulnerabilities.
python-lxmlRed HatDoS in SnakeYAML6.5 Mediumpython-lxmlRed HatDenial of Service (DoS)7.5 Highpython-lxmlRed HatPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython-lxmlRed HatIncorrect header handling in mod-wsgi7.5 Highpython-lxmlRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-lxmlRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-lxmlRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-lxmlRed HatThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 Mediumpython-lxmlRed HatNULL Pointer Dereference in lxml/lxml5.3 Mediumpython-lxmlRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-lxmlRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-lxmlRed HatIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython-lxmlRed HatSQL Injection in Django9.8 Criticalpython-lxmlRed HatSQL Injection in Django9.8 Criticalpython-lxmlRed HatTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 Mediumpython-lxmlRed HatInformation Exposure when using Puma with Rails8.0 Highpython-lxmlRed HatExposure of sensitive information in Action Pack7.4 Highpython-lxmlRed HatA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython-lxmlRed HatInfinite Loop in Django7.5 Highpython-lxmlRed HatCross-site Scripting in Django6.1 Mediumpython-lxmlRed HatDenial of service in sidekiq7.5 Highpython-lxmlRed HatDirectory-traversal in Django5.3 Mediumpython-lxmlRed HatInformation disclosure in Django7.5 Highpython-lxmlRed HatDenial-of-service in Django7.5 Highpython-lxmlRed HatA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython-lxmlRed HatA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 Highpython-lxmlRed HatRCE from attacker with configuration edit priviledges through JNDI lookup6.6 Mediumpython-lxmlRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highpython-lxmlRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumpython-lxmlRed HatPotential bypass of an upstream access control based on URL paths in Django7.3 Highpython-lxmlRed HatDirectory Traversal in Babel7.8 Highpython-lxmlRed HatInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Lowpython-lxmlRed HatRegular Expression Denial of Service in sqlparse7.5 Highpython-lxmlRed HatBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 Highpython-lxmlRed HatBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 Highpython-lxmlRed HatBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 Highpython-lxmlRed HatBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...7.5 Highpython-lxmlRed HatThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython-lxmlRed HatA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython-lxmlRed HatImproper Input Validation in pip5.7 Mediumpython-lxmlRed HatCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 Highpython-lxmlRed HatBuffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,...3.3 Lowpython-lxmlRed HatImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython-lxmlRed HatRelative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk...7.8 Highpython-lxmlRed HatCross-site Scripting in Sidekiq6.1 Mediumpython-lxmlRed HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython-lxmlRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumpython-lxmlRed Hatlxml vulnerable to Cross-Site Scripting6.1 Mediumpython-lxmlRed HatPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 Highpython-lxmlRed HatPossible request smuggling in HTTP/2 due missing validation5.9 Medium- Show moreLoading…