Known vulnerabilities in python-lxml-debuginfo
Vendor:
openEuler
Software:
python-lxml-debuginfo
Software CPE:
cpe:2.3:o:openeuler:python-lxml-debuginfo:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93015 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-37388 |
CWE-611 | Medium | 4.5.2-9, 4.7.1-6 | 21.06.2024 |
SB2024062140 SB2024062149 SB2024062150 and 1 more |
||
| #VU66813 - NULL Pointer Dereference CVE-2022-2309 |
CWE-476 | Medium | 4.5.2-8 | 29.08.2022 |
SB2022082928 SB2022082929 SB2022082930 and 28 more |
||
| #VU59660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-43818 |
CWE-79 | Low | 4.5.2-4 | 17.01.2022 |
SB2022011721 SB2022011724 SB2022050418 and 23 more |
||
| #VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-28957 |
CWE-79 | Low | 4.5.2-3 | 30.03.2021 |
SB2021033001 SB2021033005 SB2021040175 and 20 more |
||
| #VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27783 |
CWE-79 | Medium | 4.5.2-2 | 03.12.2020 |
SB2020120602 SB2020120603 SB2020121305 and 20 more |