Lucene search
+L

34 matches found

OSV
OSV
added 2026/04/01 8:27 p.m.11 views

CVE-2026-34520 AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser the default for most installs accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4...

6.9CVSS5.9AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2026/04/01 8:27 p.m.13 views

CVE-2026-34520

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser the default for most installs accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4...

9.1CVSS5.4AI score0.00461EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/01 8:27 p.m.16 views

CVE-2026-34520 AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser the default for most installs accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4...

6.9CVSS5.8AI score0.00461EPSS
SaveExploits0References3
Fedora
Fedora
added 2026/03/30 12:17 a.m.20 views

[SECURITY] Fedora 44 Update: python-pycparser-2.22-8.fc44

pycparser is a complete parser for the C language, written in pure Python. It is a module designed to be easily integrated into applications that need to parse C source code...

9.8CVSS7.3AI score0.17149EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2026/03/12 12:00 a.m.12 views

PT-2026-29609

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.13.4 Description The C parser, used by default in most installations, allowed null bytes and control characters within response headers. An attacker could leverage this to send header values that are interpreted...

9.4CVSS5.9AI score0.00461EPSS
SaveExploits0References345
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2022-4611

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.03416EPSS
SaveExploits0References9
Gentoo Linux
Gentoo Linux
added 2024/02/09 12:00 a.m.45 views

libxml2: Multiple Vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the GNOME project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround The...

7.5CVSS7.7AI score0.01364EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
added 2022/10/31 12:00 a.m.48 views

libxml2: Multiple Vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the GNOME project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround The...

7.8CVSS2.5AI score0.22791EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2022/10/16 12:00 a.m.54 views

libxml2: Multiple Vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the GNOME project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround The...

7.5CVSS2.5AI score0.0601EPSS
SaveExploits5
Gentoo Linux
Gentoo Linux
added 2020/10/20 12:00 a.m.57 views

libxml2: Multiple vulnerabilities

Background libxml2 is the XML eXtended Markup Language C parser and toolkit initially developed for the Gnome project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

7.5CVSS2.3AI score0.07836EPSS
SaveExploits0
OSV
OSV
added 2019/12/18 8:15 p.m.10 views

UBUNTU-CVE-2018-1311

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via...

8.1CVSS7.1AI score0.09503EPSS
SaveExploits0References10
FreeBSD
FreeBSD
added 2018/02/27 12:00 a.m.38 views

shibboleth-sp -- vulnerable to forged user attribute data

Shibboleth consortium reports: Shibboleth SP software vulnerable to additional data forgery flaws The XML processing performed by the Service Provider software has been found to be vulnerable to new flaws similar in nature to the one addressed in an advisory last month. These bugs involve the use...

6.5CVSS7.1AI score0.02107EPSS
SaveExploits0References1
Gentoo Linux
Gentoo Linux
added 2013/11/10 12:00 a.m.61 views

libxml2: Multiple vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the Gnome project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted docume...

7.5CVSS8.8AI score0.04951EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2011/10/26 12:00 a.m.46 views

libxml2: Multiple vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the Gnome project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact A local or remote attacker may be able to execute arbitrary code with th...

9.3CVSS8.6AI score0.13432EPSS
SaveExploits4
Rows per page
Query Builder