Lucene search
K

518 matches found

NVD
NVD
added 2023/01/26 10:15 p.m.8 views

CVE-2023-0509

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7.4AI score0.00143EPSS
Exploits1References2
NVD
NVD
added 2023/01/26 10:15 p.m.12 views

CVE-2023-0488

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

9.6CVSS6.2AI score0.00368EPSS
Exploits1References2
Prion
Prion
added 2023/01/26 10:15 p.m.9 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

6.8CVSS5.3AI score0.00368EPSS
Exploits1References2Affected Software2
Prion
Prion
added 2023/01/26 10:15 p.m.7 views

Input validation

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

4CVSS7.5AI score0.00143EPSS
Exploits1References2Affected Software2
CNNVD
CNNVD
added 2023/01/26 12:0 a.m.0 views

pyload 跨站脚本漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A cross-site scripting vulnerability exists in versions prior to pyload/pyload 0.5.0b3.dev42. An attacker could exploit this vulnerabilit...

9.6CVSS7.1AI score0.00368EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/01/26 12:0 a.m.1 views

PT-2023-16300 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyload versions prior to 0.5.0b3.dev42 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and executed by other...

9.6CVSS6.6AI score0.00368EPSS
Exploits1References6
OSV
OSV
added 2023/01/26 12:0 a.m.9 views

CVE-2023-0488 Cross-site Scripting (XSS) - Stored in pyload/pyload

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

9.6CVSS7.9AI score0.00368EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/01/26 12:0 a.m.4 views

CVE-2023-0488 Cross-site Scripting (XSS) - Stored in pyload/pyload

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

9.6CVSS5.9AI score0.00368EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/01/26 12:0 a.m.8 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS6.8AI score0.00143EPSS
Exploits1References2
CVE
CVE
added 2023/01/26 12:0 a.m.65 views

CVE-2023-0488

CVE-2023-0488 is a Stored XSS in pyload/pyload prior to version 0.5.0b3.dev42. Multiple connected sources (PT-2023-16300, CNNVD, Red Hat, GHSA, OSV, NVD/CVE, CVELIST) describe the issue as a stored XSS in the GitHub repository. The vulnerability affects pyload’s web-facing input handling and can ...

9.6CVSS5.5AI score0.00368EPSS
Exploits1References2Affected Software2
OSV
OSV
added 2023/01/26 12:0 a.m.12 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7.5AI score0.00143EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/01/26 12:0 a.m.2 views

PT-2023-16320 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyload versions prior to 0.5.0b3.dev44 Description: The issue concerns improper certificate validation. Recommendations: For versions prior to 0.5.0b3.dev44, update to version 0.5.0b3.dev44 or later to resolve the issue...

7.4CVSS7.3AI score0.00143EPSS
Exploits1References6
CVE
CVE
added 2023/01/26 12:0 a.m.69 views

CVE-2023-0509

CVE-2023-0509 affects the Python-based download manager pyload/pyload, with versions prior to 0.5.0b3.dev44 failing to validate TLS certificates. Root cause: improper certificate validation. Impact per sources: high risk to confidentiality and integrity; no availability impact indicated. Affected...

7.4CVSS7.4AI score0.00143EPSS
Exploits1References2Affected Software2
Cvelist
Cvelist
added 2023/01/26 12:0 a.m.15 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7.7AI score0.00143EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/01/26 12:0 a.m.1 views

pyload 信任管理问题漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the web. A trust management issue vulnerability exists in versions prior to pyload 0.5.0b3.dev44, which stems from incorrect validation of...

7.4CVSS7.2AI score0.00143EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2023/01/23 12:30 a.m.18 views

Excessive Attack Surface in pyload-ng

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS9AI score0.00442EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/01/23 12:30 a.m.15 views

GHSA-6JMX-PV77-WM5W Excessive Attack Surface in pyload-ng

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS6.6AI score0.00442EPSS
Exploits1References4
NVD
NVD
added 2023/01/22 10:15 p.m.6 views

CVE-2023-0435

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS5.6AI score0.00442EPSS
Exploits1References2
Prion
Prion
added 2023/01/22 10:15 p.m.9 views

Code injection

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

2.1CVSS9.5AI score0.00442EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/01/22 3:30 a.m.10 views

GHSA-X9VC-5Q77-M7X4 Improper Input Validation in pyload-ng

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS6.3AI score0.00535EPSS
Exploits1References4
Rows per page
Query Builder