Lucene search
+L

42 matches found

Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•20 views

RHEL 4 : python (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python: buffer integer overflow leading to out of bounds read CVE-2014-7185 - Python CGIHandler: sets...

5.3CVSS7.8AI score0.05122EPSS
SaveExploits6References7
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•30 views

RHEL 4 : python_cgihandler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Python CGIHandler: sets environmental variable based on user supplied Proxy request header CVE-2016-1000110 Note th...

6.4AI score0.04526EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•59 views

K75004031: Python vulnerability CVE-2016-1000110

Security Advisory Description The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests. CVE-2016-1000110 Impact There is no impact; F5 products are not affected by this...

6.1CVSS7.4AI score0.04526EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 4:53 a.m.•14 views

SUSE CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS9.1AI score0.04526EPSS
SaveExploits0References29
OpenVAS
OpenVAS
•added 2021/10/06 12:00 a.m.•23 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Windows

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/10/06 12:00 a.m.•41 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Mac OS X

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/10/06 12:00 a.m.•51 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Linux

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•87 views

SUSE: Security Advisory (SUSE-SU-2016:2859-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.2548EPSS
SaveExploits7References11
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•85 views

SUSE: Security Advisory (SUSE-SU-2016:2653-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.2548EPSS
SaveExploits7References11
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•88 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2016-1036)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.14524EPSS
SaveExploits6References2
osv_cve
osv_cve
•added 2019/11/27 5:15 p.m.•63 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.1AI score
SaveExploits0References5
NVD
NVD
•added 2019/11/27 5:15 p.m.•28 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.4AI score0.04526EPSS
SaveExploits0References5
Prion
Prion
•added 2019/11/27 5:15 p.m.•41 views

Design/Logic Flaw

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

5.8CVSS6.8AI score0.04526EPSS
SaveExploits0References5Affected Software3
osv_psf
osv_psf
•added 2019/11/27 4:54 p.m.•53 views

PSF-2019-2 HTTPoxy attack

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.5AI score0.04526EPSS
SaveExploits0References3
CVE
CVE
•added 2019/11/27 4:54 p.m.•315 views

CVE-2016-1000110

The Python CGIHandler class in versions before 2.7.12 is vulnerable to an HTTP_PROXY variable name clash in a CGI script context. A remote attacker can exploit this flaw by sending a malicious HTTP request to redirect requests performed by the Python CGI script to an attacker-controlled proxy . T...

6.1CVSS6.2AI score0.04526EPSS
SaveIn wildExploits0References5Affected Software1
Mend
Mend
•added 2019/11/27 4:54 p.m.•6 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS0.04526EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2019/11/27 4:54 p.m.•53 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.3AI score0.04526EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2019/11/27 4:54 p.m.•61 views

CVE-2016-1000110

Removed by vendor...

6.1CVSS7.1AI score0.04526EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/27 12:00 a.m.•5 views

CVE-2016-1000110: URL Redirection to Untrusted Site

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/05/02 5:46 a.m.•41 views

Open Redirection

python is vulnerable to Open Redirection vulnerability. The vulnerability exists because Python CGIHandler class does not properly protect against the HTTPPROXY variable name clash in a CGI context. Remote attackers could redirect HTTP requests performed by a Python CGI script to an...

6.1CVSS6.4AI score0.04526EPSS
SaveExploits0References10Affected Software7
Rows per page
Query Builder