Vulnerability CVE-2014-3146 - CERT Civis.Net

Vulnerability Name:

CVE-2014-3146 (CCN-93080)

Assigned:

2014-05-09

Published:

2014-05-09

Updated:

2017-12-29

Summary:

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.
Per: http://cwe.mitre.org/data/definitions/184.html

"CWE-184: Incomplete Blacklist"

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.4 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: CONFIRM
Type: UNKNOWN
http://advisories.mageia.org/MGASA-2014-0218.html

Source: MITRE
Type: CNA
CVE-2014-3146

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2014:0735

Source: CCN
Type: lxml Web site
lxml

Source: CONFIRM
Type: UNKNOWN
http://lxml.de/3.3/changes-3.3.5.html

Source: FULLDISC
Type: UNKNOWN
20140415 lxml (python lib) vulnerability

Source: FULLDISC
Type: Exploit
20140430 Re: lxml (python lib) vulnerability

Source: SECUNIA
Type: Vendor Advisory
58013

Source: SECUNIA
Type: UNKNOWN
58744

Source: SECUNIA
Type: UNKNOWN
59008

Source: DEBIAN
Type: UNKNOWN
DSA-2941

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2015:112

Source: MLIST
Type: UNKNOWN
[oss-security] 20140509 Re: CVE request: python-lxml clean_html() input sanitization flaw

Source: BID
Type: Exploit
67159

Source: CCN
Type: BID-67159
lxml 'clean_html' Function Security Bypass Vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-2217-1

Source: CCN
Type: Red Hat Bugzilla Bug 1092613
CVE-2014-3146 python-lxml: clean_html input sanitization flaw

Source: XF
Type: UNKNOWN
lxml-cve20143146-sec-bypass(93080)

Source: MLIST
Type: Exploit
[lxml] 20140415 lxml.html.clean vulnerability

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-3146

Vulnerable Configuration:

Configuration 1:

cpe:/a:lxml:lxml:0.5:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.5.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.6:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.7:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.8:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.9:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.9.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:0.9.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.0:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.1.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3.5:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:1.3.6:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.5:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.6:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.7:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.8:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.9:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.10:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.0.11:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1:alpha1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1:beta1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1:beta2:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1:beta3:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2:-:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2:alpha1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2:beta1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2:beta2:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2:beta3:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2:beta4:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.5:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.6:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.7:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.2.8:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3:-:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3:alpha1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3:alpha2:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3:beta1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3.5:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:2.3.6:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.0:-:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.0:alpha1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.0:alpha2:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.0:beta1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.0.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.1:beta1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.1.0:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.1.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.2.0:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.2.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.2.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.2.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.2.4:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.2.5:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.0:-:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.0:beta1:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.0:beta2:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.0:beta3:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.0:beta4:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.0:beta5:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.1:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.2:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:3.3.3:*:*:*:*:*:*:*

OR cpe:/a:lxml:lxml:*:*:*:*:*:*:*:* (Version <= 3.3.4)

Configuration CCN 1:

cpe:/a:lxml:lxml:3.3.4:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20143146	V	CVE-2014-3146	2022-05-20
oval:org.opensuse.security:def:26174	P	Security update for openexr (Moderate)	2021-12-01
oval:org.opensuse.security:def:26171	P	Security update for postgresql10 (Important)	2021-11-22
oval:org.opensuse.security:def:26114	P	Security update for openexr (Important)	2021-09-02
oval:org.opensuse.security:def:26110	P	Security update for aspell (Important)	2021-08-25
oval:org.opensuse.security:def:55942	P	Security update for aspell (Important)	2021-08-25
oval:org.opensuse.security:def:56054	P	Security update for libcares2 (Important)	2021-08-16
oval:org.opensuse.security:def:26099	P	Security update for libsndfile (Critical)	2021-08-05
oval:org.opensuse.security:def:57485	P	Security update for libsndfile (Critical)	2021-08-05
oval:org.opensuse.security:def:26098	P	Security update for webkit2gtk3 (Important)	2021-08-03
oval:org.opensuse.security:def:30227	P	Security update for webkit2gtk3 (Important)	2021-08-03
oval:org.opensuse.security:def:34495	P	Security update for lasso (Important)	2021-08-02
oval:org.opensuse.security:def:35508	P	Security update for nextcloud (Important)	2021-07-20
oval:org.opensuse.security:def:30095	P	Security update for xterm (Important)	2021-06-18
oval:org.opensuse.security:def:36549	P	python-lxml-2.3.6-0.13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42687	P	python-lxml-2.3.6-0.13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36280	P	python-lxml-2.3.6-0.13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32113	P	Security update for qemu (Important)	2021-06-08
oval:org.opensuse.security:def:56016	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:55185	P	Security update for python3 (Important)	2021-05-17
oval:org.opensuse.security:def:26033	P	Security update for ImageMagick (Moderate)	2021-04-20
oval:org.opensuse.security:def:34406	P	Security update for the Linux Kernel (Important)	2021-04-13
oval:org.opensuse.security:def:31746	P	Security update for wavpack (Important)	2021-03-24
oval:org.opensuse.security:def:31747	P	Security update for nghttp2 (Important)	2021-03-24
oval:org.opensuse.security:def:54774	P	Security update for python (Moderate)	2021-03-16
oval:org.opensuse.security:def:34654	P	Security update for apache2 (Moderate)	2021-03-12
oval:org.opensuse.security:def:34031	P	Security update for perl-XML-Twig (Moderate)	2021-03-01
oval:org.opensuse.security:def:55850	P	Security update for java-1_7_1-ibm (Important)	2021-02-18
oval:org.opensuse.security:def:55291	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:34020	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:30021	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:34019	P	Security update for python (Important)	2021-02-11
oval:org.opensuse.security:def:32200	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:30010	P	Security update for sudo (Important)	2021-01-27
oval:org.opensuse.security:def:30009	P	Security update for openssh (Moderate)	2021-01-05
oval:org.opensuse.security:def:35549	P	ft2demos-2.3.7-25.9 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:34349	P	Security update for strongswan (Moderate)	2020-12-01
oval:org.opensuse.security:def:34712	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:34870	P	Security update for cpio (Moderate)	2020-12-01
oval:org.opensuse.security:def:25830	P	Security update for libimobiledevice, usbmuxd (Important)	2020-12-01
oval:org.opensuse.security:def:26459	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26605	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26302	P	Security update for python-PyYAML (Moderate)	2020-12-01
oval:org.opensuse.security:def:26675	P	bzip2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26830	P	t1lib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26497	P	Security update for tor (Important)	2020-12-01
oval:org.opensuse.security:def:26847	P	yast2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27139	P	gpgme on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27870	P	Security update for python-lxml	2020-12-01
oval:org.opensuse.security:def:27384	P	cups-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27715	P	Security update for binutils	2020-12-01
oval:org.opensuse.security:def:28052	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:28787	P	Security update for Mozilla NSS	2020-12-01
oval:org.opensuse.security:def:30316	P	Security update for tgt	2020-12-01
oval:org.opensuse.security:def:30669	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:30821	P	Security update for CUPS	2020-12-01
oval:org.opensuse.security:def:54611	P	libsystemd0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55012	P	socat on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55742	P	Security update for compat-openssl098 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31832	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:32500	P	cyrus-imapd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33243	P	python-lxml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34761	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:25841	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:26508	P	Security update for phpMyAdmin (Important)	2020-12-01
oval:org.opensuse.security:def:27243	P	mozilla-xulrunner192 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26383	P	Security update for Mozilla Thunderbird (Moderate)	2020-12-01
oval:org.opensuse.security:def:26728	P	kernel-default on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26874	P	compat-libldap-2_3-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26421	P	Security update for hdf5 (Important)	2020-12-01
oval:org.opensuse.security:def:26625	P	pam_ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26998	P	ofed on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27153	P	jpeg on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27448	P	libgnomesu-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27799	P	Security update for libmspack	2020-12-01
oval:org.opensuse.security:def:28091	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:28822	P	Security update for python-lxml	2020-12-01
oval:org.opensuse.security:def:30373	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:30718	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:31459	P	Security update for postgresql94 (Important)	2020-12-01
oval:org.opensuse.security:def:54612	P	libtag1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56135	P	Security update for libical (Moderate)	2020-12-01
oval:org.opensuse.security:def:31964	P	Security update for icu (Moderate)	2020-12-01
oval:org.opensuse.security:def:32356	P	Security update for squid3 (Important)	2020-12-01
oval:org.opensuse.security:def:32522	P	gnome-screensaver on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34115	P	Security update for nagios-nrpe (Moderate)	2020-12-01
oval:org.opensuse.security:def:34800	P	Security update for ant (Moderate)	2020-12-01
oval:org.opensuse.security:def:25905	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:26255	P	Security update for libqt4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26547	P	freeradius-server on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27278	P	python-lxml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26440	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26777	P	log4net on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27512	P	lynx on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26422	P	Security update for Chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26706	P	ghostscript-fonts-other on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27051	P	vte on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27197	P	libmusicbrainz4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27372	P	automake on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27576	P	valgrind on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27950	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:28105	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:30459	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:30757	P	Security update for apache2 (Important)	2020-12-01
oval:org.opensuse.security:def:31497	P	Security update for python-lxml	2020-12-01
oval:org.opensuse.security:def:54634	P	mozilla-nspr-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:57411	P	Security update for libksba (Moderate)	2020-12-01
oval:org.opensuse.security:def:32056	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:32412	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:32566	P	libsamplerate on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34251	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:34826	P	Security update for avahi (Moderate)	2020-12-01
oval:org.opensuse.security:def:25829	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26406	P	Security update for mbedtls (Moderate)	2020-12-01
oval:org.opensuse.security:def:26561	P	gstreamer-0_10-plugins-good on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26524	P	apache2-mod_php5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26816	P	radvd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27547	P	python-lxml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26433	P	Security update for MozillaThunderbird (Critical)	2020-12-01
oval:org.opensuse.security:def:26763	P	libqt4-sql-mysql on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27100	P	cpio on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27835	P	Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:27373	P	avahi-compat-howl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27658	P	Security update for quagga	2020-12-01
oval:org.opensuse.security:def:28003	P	security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:28149	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:30614	P	Security update for sudo	2020-12-01
oval:org.opensuse.security:def:30777	P	Security update for axis (Moderate)	2020-12-01
oval:org.opensuse.security:def:55457	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31758	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:32461	P	Security update for xorg-x11-libXdmcp (Moderate)	2020-12-01
oval:org.opensuse.security:def:33204	P	man on GA media (Moderate)	2020-12-01
oval:org.mitre.oval:def:26195	P	SUSE-SU-2014:1282-1 -- Security update for python-lxml	2014-12-01
oval:org.opensuse.security:def:80119	P	Security update for python-lxml	2014-10-01
oval:org.mitre.oval:def:24536	P	DSA-2941-1 lxml - security update	2014-07-21
oval:org.mitre.oval:def:24727	P	USN-2217-1 -- lxml vulnerability	2014-07-21
oval:com.ubuntu.precise:def:20143146000	V	CVE-2014-3146 on Ubuntu 12.04 LTS (precise) - medium.	2014-05-14
oval:com.ubuntu.trusty:def:20143146000	V	CVE-2014-3146 on Ubuntu 14.04 LTS (trusty) - medium.	2014-05-14