Lucene search
+L

1293 matches found

Amazon
Amazon
added 2020/02/04 12:0 a.m.132 views

Medium: python-pip

Issue Overview: In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter. CVE-2019-11236 The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store...

7.5CVSS8.5AI score0.02836EPSS
SaveExploits1
Mageia
Mageia
added 2020/01/28 11:32 a.m.109 views

Updated python-pip packages fix security vulnerabilities

Updated python-pip packages fix security vulnerabilities: The python-pip package bundles a copy of python-urllib3, which was affected by security issues. The bundled copy was updated to fix these issues CVE-2019-11324, CVE-2019-11236...

7.5CVSS8.5AI score0.02836EPSS
SaveExploits1References3
OSV
OSV
added 2020/01/28 11:32 a.m.12 views

MGASA-2020-0063 Updated python-pip packages fix security vulnerabilities

Updated python-pip packages fix security vulnerabilities: The python-pip package bundles a copy of python-urllib3, which was affected by security issues. The bundled copy was updated to fix these issues CVE-2019-11324, CVE-2019-11236...

7.5CVSS6.9AI score0.02836EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2020/01/27 12:0 a.m.58 views

Fedora: Security Advisory for python-pip (FEDORA-2020-d0d9ad17d8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2020/01/26 9:0 p.m.183 views

Socialscan - Check Email Address And Username Availability On Online Platforms With 100% Accuracy

socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g. knowem.com,...

7.2AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/01/21 12:0 a.m.54 views

Fedora 30 : python-pip (2020-d0d9ad17d8)

Upgrade bundled urllib3 to 1.25.3, requests to 2.22.0. Security fix for CVE-2019-11324, CVE-2019-11236. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as mu...

7.5CVSS6.9AI score0.02836EPSS
SaveExploits1References3
Fedora
Fedora
added 2020/01/20 3:19 a.m.40 views

[SECURITY] Fedora 30 Update: python-pip-19.0.3-6.fc30

pip is a package management system used to install and manage software pack ages written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

7.5CVSS2.7AI score0.02836EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2020/01/09 12:0 a.m.44 views

Fedora 31 : python-pip (2020-6148c44137)

Upgrade bundled urllib3 to 1.25.3, requests to 2.22.0. Security fix for CVE-2019-11324, CVE-2019-11236. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as mu...

7.5CVSS6.9AI score0.02836EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.35 views

Fedora Update for python-pip FEDORA-2020-6148c44137

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.9 views

The vulnerability of the S Pip content management system lies in the redirection of URLs to unreliable websites, allowing attackers to compromise data integrity.

The vulnerability of the Scribunto content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the data...

6.1CVSS6.9AI score0.011EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.13 views

The vulnerability of the S Pip content management system lies in the lack of measures taken to protect the website structure, allowing attackers to compromise the integrity of the data.

The vulnerability of the Scribunto content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

6.1CVSS6.9AI score0.0116EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.10 views

The vulnerability of the S Pip content management system, related to the disclosure of user information, allows a violator to gain unauthorized access to this information.

The vulnerability of the Scribunto content management system is related to the disclosure of user information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information...

5.3CVSS6.7AI score0.07538EPSS
SaveExploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.10 views

The vulnerability of the S Pip content management system, related to incorrect authorization, allows a violator to compromise data integrity.

The vulnerability of the Scribunto content management system is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the data integrity...

6.5CVSS7AI score0.01487EPSS
SaveExploits0References3Affected Software2
RedHat Linux
RedHat Linux
added 2019/12/03 8:8 a.m.107 views

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.6CVSS6.7AI score0.13378EPSS
SaveExploits4References6
Kitploit
Kitploit
added 2019/11/30 8:52 p.m.119 views

Subdomain3 - A New Generation Of Tool For Discovering Subdomains

Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Features More quick Three patterns for speed. User can modify the...

7.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2019/11/06 12:0 p.m.118 views

Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux

Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...

7.2AI score
SaveExploits0References3
NVD
NVD
added 2019/11/05 10:15 p.m.24 views

CVE-2013-5123

The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...

5.9CVSS5.5AI score0.07987EPSS
SaveExploits2References8
OSV
OSV
added 2019/11/05 10:15 p.m.10 views

CVE-2013-5123

The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...

5.9CVSS5.8AI score0.07987EPSS
SaveExploits2References16
OSV
OSV
added 2019/11/05 10:15 p.m.3 views

DEBIAN-CVE-2013-5123

The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...

5.9CVSS5.9AI score0.07987EPSS
SaveExploits2References1
PyPA
PyPA
added 2019/11/05 10:15 p.m.7 views

PYSEC-2019-160

The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...

5.9CVSS6.9AI score0.07987EPSS
SaveExploits2References9Affected Software1
Rows per page
Query Builder