Lucene search
+L

1504 matches found

Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•37 views

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

5.7CVSS7.2AI score0.01829EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•79 views

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory. - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS CVE-2021-28957 - python-ipaddress: Improper input validation ...

9.8CVSS7AI score0.11586EPSS
SaveExploits6References8
OSV
OSV
•added 2021/11/10 6:15 p.m.•29 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS7.2AI score
SaveExploits0References4
OSV
OSV
•added 2021/11/10 6:15 p.m.•13 views

AZL-86103 CVE-2021-3572 affecting package python-IPy 1.01-13

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References1
OSV
OSV
•added 2021/11/10 6:15 p.m.•9 views

DEBIAN-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/10 6:15 p.m.•41 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS0.01829EPSS
SaveExploits2References4
Prion
Prion
•added 2021/11/10 6:15 p.m.•37 views

Design/Logic Flaw

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

3.5CVSS7AI score0.01829EPSS
SaveExploits2References3Affected Software4
UbuntuCve
UbuntuCve
•added 2021/11/10 6:15 p.m.•68 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References6
OSV
OSV
•added 2021/11/10 6:15 p.m.•15 views

UBUNTU-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References7
PyPA
PyPA
•added 2021/11/10 6:15 p.m.•20 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.7AI score0.01829EPSS
SaveExploits2References2Affected Software1
attackerkb
attackerkb
•added 2021/11/10 6:15 p.m.•8 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS5.6AI score0.01829EPSS
SaveExploits2References5
OSV
OSV
•added 2021/11/10 6:15 p.m.•100 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS4AI score0.01829EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/11/10 5:55 p.m.•65 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

6.1AI score0.01829EPSS
SaveExploits2References4
Debian CVE
Debian CVE
•added 2021/11/10 5:55 p.m.•72 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.9AI score0.01829EPSS
SaveExploits2
CVE
CVE
•added 2021/11/10 5:55 p.m.•594 views

CVE-2021-3572

The CVE-2021-3572 issue affects python-pip and stems from how it handles Unicode separators in git references, with the potential to cause a different revision to be installed in a repository. The vulnerability affects data integrity and is mitigated by upgrading to python-pip version 21.1, which...

5.7CVSS5.8AI score0.01829EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/10 12:00 a.m.•3 views

CVE-2021-3572: Improper Input Validation

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS5.9AI score0.01829EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2021/11/09 6:30 p.m.•75 views

Low: Red Hat Security Advisory: python-pip security update

An update for python-pip is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

5.7CVSS6.7AI score0.01829EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
•added 2021/11/09 5:54 p.m.•17 views

python-pip: Incorrect handling of unicode separators in git references

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity...

5.7CVSS7.2AI score0.01829EPSS
SaveExploits2References4
OSV
OSV
•added 2021/11/09 9:24 a.m.•40 views

ALSA-2021:4455 Low: python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fixes: python-pip:...

5.7CVSS7.1AI score0.01829EPSS
SaveExploits2References1
AlmaLinux
AlmaLinux
•added 2021/11/09 9:24 a.m.•46 views

Low: python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fixes: python-pip:...

5.7CVSS7AI score0.01829EPSS
SaveExploits2References1
Rows per page
Query Builder