Lucene search
K

317 matches found

OpenVAS
OpenVAS
added 2021/08/09 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for python-ipaddress (EulerOS-SA-2021-2313)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.1AI score0.00697EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/23 12:0 a.m.25 views

Python < 3.9.5 Authentication Bypass Vulnerability - Mac OS X

Python is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.02048EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/06/23 12:0 a.m.26 views

Python < 3.9.5 Authentication Bypass Vulnerability - Windows

Python is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.02048EPSS
Exploits1References2
OSV
OSV
added 2021/06/01 11:56 a.m.1 views

USN-4973-1 python3.8 vulnerability

It was discovered that the Python stdlib ipaddress API incorrectly handled octal strings. A remote attacker could possibly use this issue to perform a wide variety of attacks, including bypassing certain access restrictions...

9.8CVSS6.9AI score0.02048EPSS
Exploits1References2
Gitee
Gitee
added 2021/05/20 8:33 p.m.1 views

jexboss

Exploit module/targeting JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. The provided code is a Python script that appears to be a tool for testing and exploiting vulnerabilities in JBoss Application Server and other Java-based platforms. The script is written i...

7AI score
Exploits0
OSV
OSV
added 2021/05/06 1:15 p.m.34 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS6.9AI score
Exploits0References17
OSV
OSV
added 2021/05/06 1:15 p.m.1 views

DEBIAN-CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS7.3AI score0.02048EPSS
Exploits1References1
OSV
OSV
added 2021/05/06 1:15 p.m.1 views

ALPINE-CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS6.9AI score0.02048EPSS
Exploits1References1
NVD
NVD
added 2021/05/06 1:15 p.m.18 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS0.02048EPSS
Exploits1References17
Prion
Prion
added 2021/05/06 1:15 p.m.79 views

Improper access control

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS8.3AI score0.02048EPSS
Exploits1References16Affected Software6
UbuntuCve
UbuntuCve
added 2021/05/06 1:15 p.m.46 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS6.9AI score0.02048EPSS
Exploits1References12
OSV
OSV
added 2021/05/06 1:15 p.m.0 views

UBUNTU-CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS7.1AI score0.02048EPSS
Exploits1References13
Debian CVE
Debian CVE
added 2021/05/06 12:0 a.m.262 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS8AI score0.02048EPSS
Exploits1
CVE
CVE
added 2021/05/06 12:0 a.m.5095 views

CVE-2021-29921

CVE-2021-29921 affects the ipaddress module in Python, where leading zeros in IPv4 octets are mishandled, potentially bypassing IP-based access controls. The issue is addressed by Python 3.9.5 and later; many advisories (Debian, AlmaLinux, Alpine, etc.) reference updates or security trackers conf...

9.8CVSS9.3AI score0.02048EPSS
Exploits1References17Affected Software1
Cvelist
Cvelist
added 2021/05/06 12:0 a.m.27 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.6AI score0.02048EPSS
Exploits1References16
OSV
OSV
added 2021/05/06 12:0 a.m.45 views

PSF-2021-2 ipaddress leading zeros in IPv4 address

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS9.5AI score0.02048EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2021/05/06 12:0 a.m.54 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS9.6AI score0.02048EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2021/05/05 7:49 p.m.38 views

CVE-2021-29921

A flaw was found in python-ipaddress. Improper input validation of octal strings in stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. The highest threat from this vulnerability is to...

9.8CVSS5AI score0.02048EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2021/05/05 12:0 a.m.18 views

FreeBSD : Python -- multiple vulnerabilities (bffa40db-ad50-11eb-86b8-080027846a02)

Python reports : bpo-43434: Creating a sqlite3.Connection object now also produces a sqlite3.connect auditing event. Previously this event was only produced by sqlite3.connect calls. Patch by Erlend E. Aasland. bpo-43882: The presence of newline or tab characters in parts of a URL could allow som...

5.5AI score
Exploits0References3
CNNVD
CNNVD
added 2021/04/30 12:0 a.m.1 views

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability in Python stdlib ipaddress 3.10 and below allows unauthenticated, remote attackers to...

9.8CVSS7.5AI score0.02048EPSS
Exploits1References36
Rows per page
Query Builder