34 matches found
ROOT-OS-DEBIAN-11-CVE-2026-8328 CVE-2026-8328 in python3.9 - Patched by Root
Root has patched CVE-2026-8328 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-8328 CVE-2026-8328 in python3.11 - Patched by Root
Root has patched CVE-2026-8328 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:3245-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3245-1 advisory. - CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding bsc1264962...
MAL-2026-8328 Malicious code in oaipulhsxmtjc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-8328
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
BELL-CVE-2026-8328
Bulletin has no description...
CVE-2026-8328 vulnerabilities
Vulnerabilities for packages: python...
SUSE CVE-2026-8328
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
DEBIAN-CVE-2026-8328
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
UBUNTU-CVE-2026-8328
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
CVE-2026-8328
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
GHSA-MPFH-94P7-8328 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-vmware, linux-gcp...
CVE-2016-8328 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9...
MAL-2025-8328 Malicious code in @lbnqduy/effective-system (npm)
The package @lbnqduy/effective-system was found to contain malicious code...
CVE-2024-8328
creationtimestamp| type| source ---|---|--- 2024-08-30 05:37:07+00:00| seen| https://t.me/cvedetector/4490...
CVE-2020-8328
CVE-2020-8328 is rejected/not used; this candidate was withdrawn by its CNA.
CVE-2014-8328
The CVE-2014-8328 issue affects the TYPO3 Dynamic Content Elements (dce) extension prior to version 0.11.5. The vulnerability arises from the extension’s update check functionality, which could disclose sensitive installation environment information to remote attackers. The in-scope detail confir...
CVE-2017-8328
creationtimestamp| type| source ---|---|--- 2019-06-19 00:31:44+00:00| seen| https://t.me/cibsecurity/5002...
CVE-2017-8328
The CVE-2017-8328 entry describes a CSRF flaw in Securifi Almond/Almond+ (2015) firmware AL-R096 where an attacker can coerce a logged-in user to change a password via the web management interface due to the absence of CSRF protection. Connected sources (NVD/CNVD/CVE records) confirm that the vul...