PT-2019-4598 · Python +8 · Python +8

🗓️ 06 Mar 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Unicode NFKC normalization in Python can leak credentials via crafted URLs to urlparse and urlsplit.

Reporter	Title	Published	Views	Family All 14852
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for Digital Payments	2 Oct 201819:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Java Runtime affect IBM Rational ClearCase (CVE-2016-2183, CVE-2016-5546, CVE-2016-5547, CVE-2016-5548, CVE-2016-5549)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Sterling Connect:Direct FTP+	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM JAVA 7 affect IBM UrbanCode Release (CVE-2016-2183)	18 Dec 201913:22	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in OpenSSL (CVE-2017-3736)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security Directory Suite.	31 Jul 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affects IBM Rational ClearCase (CVE-2016-2177, CVE-2016-2178, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2022-0391)	1 Jun 202210:29	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb
github	www.github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-5172.md
github	www.github.com/mpgn/BEAST-PoC
github	www.github.com/ssllabs/openssl-ccs-cve-2014-0224
github	www.github.com/secretnonempty/CVE-2014-0224
github	www.github.com/bunseokbot/CVE-2016-5699-poc
github	www.github.com/insuyun/CVE-2016-5636
github	www.github.com/tna0y/CVE-2018-1000802-PoC
github	www.github.com/Einstein2150/CVE-2022-48565-POC
web	www.web.archive.org/web/20250000000000*/https:/github.com/alidnf/CVE-2019-11730

11 Jul 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8 - 9.8

CVSS 210

CVSS 39.8

EPSS0.95707

SSVC