Lucene search
+L

2672 matches found

Mageia
Mageia
added 2021/10/13 7:39 p.m.71 views

Updated python-flask-restx packages fix security vulnerability

Regular expression denial of service in emailregex...

7.5CVSS3.4AI score0.01864EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2021/10/06 11:30 a.m.125 views

Scrummage - The Ultimate OSINT And Threat Hunting Framework

VERSION 3.6 Code efficiency enhancements and bug fixes for plugins, and improved logging. Significant UI/UX enhancements. Organisation specific settings and configurations, allowing for predefined searches based on your organisation and it's users. Due to the above change, if you are upgrading fr...

7.1AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.55 views

The vulnerability of the Flask software’s extension relates to insecure privilege management. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.07064EPSS
SaveExploits4References4Affected Software2
OpenVAS
OpenVAS
added 2021/10/02 12:00 a.m.33 views

Fedora: Security Advisory for python-flask-restx (FEDORA-2021-0739f45529)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.01864EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/10/02 12:00 a.m.38 views

Fedora: Security Advisory for python-flask-restx (FEDORA-2021-67b7695f95)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.01864EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/09/30 1:15 a.m.42 views

[SECURITY] Fedora 34 Update: python-flask-restx-0.3.0-2.fc34

Flask-RESTX is an extension for Flask that adds support for quickly building REST APIs. It encourages best practices with minimal setup. If you are familiar with Flask, Flask-RESTX should be easy to pick up. It provides a coherent collection of decorators and tools to describe your API and expose...

7.5CVSS7.6AI score0.01864EPSS
SaveExploits0
Fedora
Fedora
added 2021/09/30 1:06 a.m.45 views

[SECURITY] Fedora 33 Update: python-flask-restx-0.2.0-4.fc33

Flask-RESTX is an extension for Flask that adds support for quickly building REST APIs. It encourages best practices with minimal setup. If you are familiar with Flask, Flask-RESTX should be easy to pick up. It provides a coherent collection of decorators and tools to describe your API and expose...

7.5CVSS7.6AI score0.01864EPSS
SaveExploits0
NVD
NVD
added 2021/09/20 6:15 p.m.48 views

CVE-2021-32838

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

7.5CVSS0.01864EPSS
SaveExploits0References7
OSV
OSV
added 2021/09/20 6:15 p.m.30 views

CVE-2021-32838

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

7.5CVSS7.3AI score
SaveExploits0References7
Prion
Prion
added 2021/09/20 6:15 p.m.26 views

Design/Logic Flaw

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

5CVSS7.3AI score0.01864EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2021/09/20 6:15 p.m.11 views

PYSEC-2021-325

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

7.5CVSS7.1AI score0.01864EPSS
SaveExploits0References5
PyPA
PyPA
added 2021/09/20 6:15 p.m.13 views

PYSEC-2021-325

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

7.5CVSS6.8AI score0.01864EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2021/09/20 5:30 p.m.130 views

CVE-2021-32838

CVE-2021-32838 : Flask-RESTX (flask-restx) before 0.5.1 is vulnerable to a Regular Expression Denial of Service (ReDoS) in email_regex. The issue is fixed in version 0.5.1. Affected: Flask-RESTX prior to 0.5.1. Impact details are limited to what the description states; no exploitation or scope be...

7.5CVSS7.2AI score0.01864EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2021/09/20 5:30 p.m.77 views

CVE-2021-32838 Regular Expression Denial of Service in flask-restx

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

7.5CVSS7.6AI score0.01864EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/09/20 12:00 a.m.35 views

flask-restx 资源管理错误漏洞

flask-restx is a software application. Fork Flask-RESTPlus: Full-featured framework for fast, simple and documented API development Bottle A resource management error vulnerability previously existed in Flask-RESTX version 0.5.1 that allowed an attacker to conduct a ReDoS Regular Expression Denia...

7.5CVSS7.5AI score0.01864EPSS
SaveExploits0References9
Veracode
Veracode
added 2021/09/09 8:25 a.m.13 views

Regular Expression Denial Of Service(ReDoS)

flaskrestx is vulnerable to regular expression denial of service. The use of emailregex allows an attacker to send malicious string to cause excessive processing of regex engine...

7.5CVSS6.5AI score0.01864EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/09/08 9:11 p.m.77 views

GHSA-624F-CQVR-3QW4 Flask-AppBuilder Open Redirect vulnerability

Impact If using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted domain for an application built with Flask-AppBuilder, this URL can redirect a user to a malicious site. This is an open redirect vulnerability Patches Install Flask-AppBuilder 3.2.2 or above...

7.2CVSS6.3AI score0.007EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2021/09/08 9:11 p.m.77 views

Flask-AppBuilder Open Redirect vulnerability

Impact If using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted domain for an application built with Flask-AppBuilder, this URL can redirect a user to a malicious site. This is an open redirect vulnerability Patches Install Flask-AppBuilder 3.2.2 or above...

7.2CVSS6.2AI score0.007EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2021/09/08 6:15 p.m.37 views

CVE-2021-32805

Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted domain for an application built with Flask-AppBuilder, this URL can redirect a user to a malicious...

7.2CVSS0.007EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/08 6:15 p.m.15 views

CVE-2021-32805

Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted domain for an application built with Flask-AppBuilder, this URL can redirect a user to a malicious...

6.1CVSS6.2AI score
SaveExploits0References2
Rows per page
Query Builder