CVE-2022-0391

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator URL strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an...

CVE-2022-0391

CVE-2022-0391 affects the Python urllib.parse.urlparse path handling, where input is not sanitized and allows literal CR/LF characters, enabling crafted URLs to trigger injection-like issues. Public docs (Python history, Debian LTS/DLA notes, Astra Linux bulletin) corroborate that the vulnerabili...

Fedora: Security Advisory for mingw-python3 (FEDORA-2022-7018d21c6b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2019-0391)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2012-0391

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution...

Critical Photon OS Security Update - PHSA-2021-0391

Updates of 'bindutils', 'gnutls', 'libmspack' packages of Photon OS have been released...

CVE-2021-0391

In onCreate of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

CVE-2021-0391

CVE-2021-0391 affects Android Open Source Project: the vulnerability resides in the UI flow of ChooseTypeAndAccountActivity (onCreate in ChooseTypeAndAccountActivity.java). It allows learning whether an account exists via a tapjacking/overlay attack, without requiring permissions. Impact: local e...

CVE-2020-0391

creationtimestamp| type| source ---|---|--- 2020-09-17 21:55:12+00:00| seen| https://t.me/cibsecurity/14720...

CVE-2020-0391

In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0391

CVE-2020-0391 is an Android elevation-of-privilege issue in PackageManagerService.applyPolicy that allows arbitrary command execution as System due to an unenforced protected-broadcast. It enables local privilege escalation with no user interaction on Android 9–11. The Android bulletin notes this...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200826)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139893;...

CVE-2019-0391

The CVE-2019-0391 issue affects SAP NetWeaver AS Java and enables information disclosure. Multiple sources confirm affected SAP NetWeaver AS Java versions: 7.10, 7.20, 7.30, 7.31, 7.40, and 7.50. Root cause and impact are described as an information-disclosure vulnerability that could allow attac...

Cisco Prime Collaboration Provisioning Unauthorized Password Change Denial of Service Vulnerability (cisco-sa-20180801-pcp-dos

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is prior to 12.3. It is, therefore, affected by unauthorized password change denial of service vulnerability which could allow the attacker to cause the affected device to become inoperable,...

CVE-2018-0391

The CVE-2018-0391 issue affects Cisco Prime Collaboration Provisioning (PCP) prior to 12.3, with the root cause being insufficient validation of a password-change request in the authentication flow. A remote attacker could cause the targeted device to become inoperable, resulting in a DoS conditi...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0391

Upstream security update. Follow RHBA-2017-0391 for details...

CVE-2017-0391

A denial of service vulnerability in decoder/ihevcddecode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0,...

CVE-2017-0391

A denial of service vulnerability in decoder/ihevcddecode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0,...

CVE-2017-0391

CVE-2017-0391 is a DoS vulnerability in Mediaserver’s libhevc decoder (decoder/ihevcd_decode.c). A remote attacker could exploit a specially crafted Media file to trigger a device hang or reboot. The Android bulletin/summary specifies this issue under the Media/Mediaserver entry with a High impac...

CVE-2016-0391

CVE-2016-0391 detail (IBM Watson Bluemix) Affected: IBM Watson Developer Cloud services on Bluemix (e.g., Concept Expansion, Concept Insights, Dialog, Document Conversion, Language Translation, Natural Language Classifier, Personality Insights, Relationship Extraction, Retrieve and Rank, Speech t...