Lucene search
K

37 matches found

Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.10 views

RHEL 4 : python (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python: buffer integer overflow leading to out of bounds read CVE-2014-7185 - Python CGIHandler: sets...

5.3CVSS7.8AI score0.09899EPSS
Exploits6References7
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.25 views

RHEL 4 : python_cgihandler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Python CGIHandler: sets environmental variable based on user supplied Proxy request header CVE-2016-1000110 Note th...

6.4AI score0.09899EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2023/02/21 6:34 p.m.39 views

K75004031: Python vulnerability CVE-2016-1000110

Security Advisory Description The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests. CVE-2016-1000110 Impact There is no impact; F5 products are not affected by this...

6.1CVSS7.4AI score0.09899EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 4:53 a.m.2 views

SUSE CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS9.1AI score0.09899EPSS
Exploits0References29
OpenVAS
OpenVAS
added 2021/10/06 12:0 a.m.16 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Windows

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.09899EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/10/06 12:0 a.m.22 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Mac OS X

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.09899EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/10/06 12:0 a.m.26 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Linux

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.09899EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2016:2653-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.45123EPSS
Exploits7References11
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2016:2859-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.45123EPSS
Exploits7References11
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.37 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2016-1036)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.41714EPSS
Exploits6References2
NVD
NVD
added 2019/11/27 5:15 p.m.13 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.4AI score0.09899EPSS
Exploits0References5
OSV
OSV
added 2019/11/27 5:15 p.m.25 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.1AI score0.09899EPSS
Exploits0References5
Prion
Prion
added 2019/11/27 5:15 p.m.25 views

Design/Logic Flaw

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

5.8CVSS6.8AI score0.09899EPSS
Exploits0References5Affected Software3
Debian CVE
Debian CVE
added 2019/11/27 4:54 p.m.36 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.9AI score0.09899EPSS
Exploits0
OSV
OSV
added 2019/11/27 4:54 p.m.31 views

PSF-2019-2 HTTPoxy attack

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.5AI score0.09899EPSS
Exploits0References3
CVE
CVE
added 2019/11/27 4:54 p.m.270 views

CVE-2016-1000110

The CVE-2016-1000110 issue affects Python’s CGIHandler class prior to 2.7.12, where the HTTP_PROXY environment variable name clash in a CGI script could allow a remote attacker to redirect outgoing HTTP requests. Public advisories and vendor notices (Debian/Red Hat/CentOS, Ubuntu USN, Cloud Found...

6.1CVSS6.2AI score0.09899EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2019/11/27 4:54 p.m.19 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.3AI score0.09899EPSS
Exploits0References5
Veracode
Veracode
added 2019/05/02 5:46 a.m.27 views

Open Redirection

python is vulnerable to Open Redirection vulnerability. The vulnerability exists because Python CGIHandler class does not properly protect against the HTTPPROXY variable name clash in a CGI context. Remote attackers could redirect HTTP requests performed by a Python CGI script to an...

6.1CVSS6.4AI score0.09899EPSS
Exploits0References10Affected Software7
Tenable Nessus
Tenable Nessus
added 2017/05/01 12:0 a.m.48 views

EulerOS 2.0 SP1 : python (EulerOS-SA-2016-1036)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the Python CGIHandler class did not properly protect against the HTTPPROXY variable name clash in a CGI context. A remote...

6.5CVSS7.2AI score0.41714EPSS
Exploits6References4
OSV
OSV
added 2016/10/26 1:22 p.m.8 views

SUSE-SU-2016:2653-1 Security update for python3

This update provides Python 3.4.5, which brings many fixes and enhancements. The following security issues have been fixed: - CVE-2016-1000110: CGIHandler could have allowed setting of HTTPPROXY environment variable based on user supplied Proxy request header. bsc989523 - CVE-2016-0772: A...

10CVSS7.2AI score0.45123EPSS
Exploits7References12
Rows per page
Query Builder