Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux enterprise module for web scripting vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-0455
Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and previous versions in the 2.2.x series, 2.0.61 and previous versions in the 2.0.x series, and 1.3.39 and previous versions in the 1.3.x series allows remote authenticated use...
Apache Http ServerRedhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 5.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 6.4.0
6.1
CVSSv3
CVE-2020-27783
A XSS vulnerability exists in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
Lxml LxmlRedhat Enterprise Linux 8.0Redhat Software Collections -Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Netapp Snapcenter -Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Zfs Storage Appliance Kit 8.8
7.5
CVSSv3
CVE-2019-9517
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually writ...
Apple SwiftnioApache Traffic ServerApache Http ServerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 9.0Debian Debian Linux 10.0Synology Skynas -Synology Diskstation Manager 6.2Synology Vs960hd Firmware -Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.0Opensuse Leap 15.1Redhat Software Collections 1.0Redhat Jboss Core Services 1.0Redhat Enterprise Linux 8.0Redhat Jboss Enterprise Application Platform 7.2.0Redhat Quay 3.0.0Redhat Openshift Service Mesh 1.0Redhat Jboss Enterprise Application Platform 7.3.0
6.1
CVSSv3
CVE-2019-10092
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server ...
Apache Http ServerOpensuse Leap 15.0Opensuse Leap 15.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Software Collection 1.0Fedoraproject Fedora 30Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Netapp Clustered Data Ontap 9.6Netapp Clustered Data OntapOracle Enterprise Manager Ops Center 12.3.3Oracle Secure Global Desktop 5.4Oracle Enterprise Manager Ops Center 12.4.0Oracle Secure Global Desktop 5.5Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0
7.1
CVSSv3
CVE-2021-43818
lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a s...
Lxml LxmlFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Solidfire -Netapp Solidfire Enterprise Sds -Netapp Hci Storage Node Firmware -Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Policy 22.2.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.1
NA
CVE-2012-4558
Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x prior to 2.2.24-dev and 2.4.x prior to 2.4.4 allow remote malicious users to inje...
Apache Http Server 2.2.23Apache Http Server 2.2Apache Http Server 2.2.11Apache Http Server 2.2.0Apache Http Server 2.2.10Apache Http Server 2.2.13Apache Http Server 2.2.2Apache Http Server 2.2.4Apache Http Server 2.2.17Apache Http Server 2.2.16Apache Http Server 2.2.21Apache Http Server 2.2.8Apache Http Server 2.2.14Apache Http Server 2.2.6Apache Http Server 2.2.22Apache Http Server 2.2.19Apache Http Server 2.2.9Apache Http Server 2.2.18Apache Http Server 2.2.12Apache Http Server 2.2.3Apache Http Server 2.2.15Apache Http Server 2.2.20
NA
CVE-2012-3499
Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x prior to 2.2.24-dev and 2.4.x prior to 2.4.4 allow remote malicious users to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3)...
Apache Http Server 2.2.23Apache Http Server 2.2Apache Http Server 2.2.11Apache Http Server 2.2.0Apache Http Server 2.2.10Apache Http Server 2.2.13Apache Http Server 2.2.2Apache Http Server 2.2.4Apache Http Server 2.2.17Apache Http Server 2.2.16Apache Http Server 2.2.21Apache Http Server 2.2.8Apache Http Server 2.2.14Apache Http Server 2.2.6Apache Http Server 2.2.22Apache Http Server 2.2.19Apache Http Server 2.2.9Apache Http Server 2.2.18Apache Http Server 2.2.12Apache Http Server 2.2.3Apache Http Server 2.2.15Apache Http Server 2.2.20
5.4
CVSSv3
CVE-2022-43754
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows...
Uyuni-project UyuniSuse Manager Server
7.5
CVSSv3
CVE-2016-2180
The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL up to and including 1.0.2h allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a cr...
Openssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.1rOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.2gOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.2hOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1tOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.1pOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1nOpenssl Openssl 1.0.1qOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1l
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook