Lucene search
+L

4257 matches found

Tenable Nessus
Tenable Nessus
added 2020/11/03 12:00 a.m.63 views

EulerOS 2.0 SP9 : python3 (EulerOS-SA-2020-2437)

According to the version of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

7.2CVSS7.3AI score0.06358EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/03 12:00 a.m.48 views

EulerOS 2.0 SP2 : python (EulerOS-SA-2020-2388)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

7.5CVSS7.3AI score0.06358EPSS
SaveExploits1References3
OSV
OSV
added 2020/11/02 4:08 p.m.11 views

SUSE-SU-2020:3121-1 Security update for python

This update for python fixes the following issues: - CVE-2020-26116: Fixed CRLF injection via HTTP request method bsc1177211...

7.2CVSS7.5AI score0.06358EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2020/11/02 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2020-2317)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.6AI score0.06358EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/02 12:00 a.m.41 views

EulerOS 2.0 SP8 : python2 (EulerOS-SA-2020-2317)

According to the version of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

7.2CVSS7.3AI score0.06358EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/02 12:00 a.m.44 views

EulerOS 2.0 SP8 : python3 (EulerOS-SA-2020-2318)

According to the version of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

7.2CVSS7.3AI score0.06358EPSS
SaveExploits1References2
Prion
Prion
added 2020/10/21 7:15 p.m.23 views

Crlf injection

A vulnerability in the Clientless SSL VPN WebVPN of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The vulnerability is due to...

4.3CVSS5.1AI score0.0128EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2020/10/21 6:41 p.m.36 views

CVE-2020-3561 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability

A vulnerability in the Clientless SSL VPN WebVPN of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The vulnerability is due to...

4.7CVSS5AI score0.0128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/10/21 6:41 p.m.16 views

CVE-2020-3561 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability

A vulnerability in the Clientless SSL VPN WebVPN of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The vulnerability is due to...

4.7CVSS7.1AI score0.0128EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/21 6:41 p.m.99 views

CVE-2020-3561

CVE-2020-3561 affects Cisco ASA/FTD WebVPN (Clientless SSL VPN). The issue is a result of improper input sanitization that enables unauthenticated, remote CRLF header injection when a user is lured to click a crafted link, allowing arbitrary HTTP headers to be injected and potential redirection. ...

4.7CVSS4.9AI score0.0128EPSS
SaveExploits0References1Affected Software3
Cisco
Cisco
added 2020/10/21 4:00 p.m.26 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability

Update from October 22nd, 2020: Cisco has become aware of a new Cisco Adaptive Security Appliance vulnerability that could affect the fixed releases recommended for code trains 9.13 and 9.14 in the Fixed Software "fs" section of this advisory. See the Cisco Adaptive Security Appliance Software...

4.7CVSS5.1AI score0.0128EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/10/20 4:03 p.m.112 views

Moderate: Red Hat Security Advisory: python27 security, bug fix, and enhancement update

An update for python27-python, python27-python-pip, and python27-python-virtualenv is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

7.5CVSS6.8AI score0.06358EPSS
SaveExploits2References6
RedHat Linux
RedHat Linux
added 2020/10/19 6:08 p.m.131 views

Moderate: Red Hat Security Advisory: rh-python36 security, bug fix, and enhancement update

An update for rh-python36-python, rh-python36-python-pip, and rh-python36-python-virtualenv is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives...

7.5CVSS6.7AI score0.12706EPSS
SaveExploits4References10
RedHat Linux
RedHat Linux
added 2020/10/19 6:08 p.m.6 views

python: CRLF injection via the host part of the url passed to urlopen()

A CRLF injection flaw was discovered in python in the way URLs are handled when doing an HTTP/HTTPS connection e.g. through urlopen or HTTPConnection. An attacker who can control the url parameter passed to urlopen method in the urllib/urllib2 modules can inject CRLF sequences and HTTP headers by...

6.1CVSS6.9AI score0.03513EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/10/19 12:00 a.m.40 views

Fedora 32 : python27 (2020-887d3fa26f)

CVE-2020-26116: HTTP request method CRLF injection in httplib Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

7.2CVSS7.3AI score0.06358EPSS
SaveExploits1References2
Veracode
Veracode
added 2020/10/18 1:59 a.m.39 views

CRLF Injection

python is vulnerable CRLF Injection. The vulnerability exists through the first argument of HTTPConnection.request...

7.2CVSS7.3AI score0.06358EPSS
SaveExploits1References19Affected Software17
Kitploit
Kitploit
added 2020/10/16 8:30 p.m.26 views

Eagle - Yet Another Vulnerability Scanner

Project Eagle is a plugin based vulnerabilities scanner with threading support used for detection of low-hanging bugs on mass scale .---. .----------- / \ / ------ / / \ / ----- ////// ' / --- Multipurpose vulnerability scanner //// / // : : --- v1.0b / / / / '-- 2019-2020 //..\ ====UU====UU====...

6.6AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/10/15 12:00 a.m.26 views

Ubuntu: Security Advisory (USN-4581-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.6AI score0.06358EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2020/10/14 2:35 p.m.95 views

USN-4581-1: Python vulnerability

It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF injection...

7.2CVSS7.4AI score0.06358EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2020/10/14 12:00 a.m.53 views

Ubuntu 16.04 LTS / 18.04 LTS : Python vulnerability (USN-4581-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4581-1 advisory. It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF...

7.2CVSS7.3AI score0.06358EPSS
SaveExploits1References2
Rows per page
Query Builder