Lucene search
+L

762 matches found

Prion
Prion
•added 2023/01/05 1:15 a.m.•26 views

Input validation

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

2.6CVSS6.3AI score0.00481EPSS
SaveExploits0References2Affected Software2
osv_ghsa
osv_ghsa
•added 2023/01/05 12:30 a.m.•100 views

GHSA-M3G7-WRRQ-V5C8 Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32. The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session. This issue is...

5.3CVSS4.3AI score0.00452EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/01/05 12:30 a.m.•57 views

Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32. The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session. This issue is...

5.3CVSS5.3AI score0.00452EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2023/01/05 12:00 a.m.•131 views

CVE-2023-0057

CVE-2023-0057 affects pyload/pyload prior to 0.5.0b3.dev33. The root cause is improper restriction of rendered UI layers or frames, enabling potential clickjacking by a remote attacker. Affected versions are pre-0.5.0b3.dev33. Remediation: update to 0.5.0b3.dev33 or later; or apply a workaround t...

6.1CVSS5.6AI score0.00481EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2023/01/05 12:00 a.m.•9 views

CVE-2023-0057 Improper Restriction of Rendered UI Layers or Frames in pyload/pyload

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

3.1CVSS6.8AI score0.00481EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/05 12:00 a.m.•22 views

pyload security vulnerability

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A security vulnerability exists in pyload versions prior to 0.5.0b3.dev33, which stems from an improper restriction in its rendering UI...

6.1CVSS4.9AI score0.00481EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/01/05 12:00 a.m.•69 views

CVE-2023-0057 Improper Restriction of Rendered UI Layers or Frames in pyload/pyload

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

3.1CVSS6.5AI score0.00481EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/01/05 12:00 a.m.•53 views

CVE-2023-0057 Improper Restriction of Rendered UI Layers or Frames in pyload/pyload

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

3.1CVSS4.2AI score0.00481EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/05 12:00 a.m.•5 views

CVE-2023-0057: Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

6.1CVSS5.7AI score0.00481EPSS
SaveExploits0References2
Mend
Mend
•added 2023/01/05 12:00 a.m.•11 views

CVE-2023-0057

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

6.1CVSS0.00481EPSS
SaveExploits0References7
NVD
NVD
•added 2023/01/04 10:15 p.m.•55 views

CVE-2023-0055

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

5.3CVSS4.3AI score0.00452EPSS
SaveExploits1References2
Prion
Prion
•added 2023/01/04 10:15 p.m.•26 views

Session fixation

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

2.6CVSS5.3AI score0.00452EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/04 12:00 a.m.•13 views

PT-2023-8312

Name of the Vulnerable Software and Affected Versions pyload versions prior to 0.5.0b3.dev33 Description The issue is related to improper restriction of rendered UI layers or frames in the pyload software, which can be exploited by a remote attacker to conduct a clickjacking attack. This allows t...

6.1CVSS6AI score0.00481EPSS
SaveExploits0References13
osv_cve
osv_cve
•added 2023/01/04 12:00 a.m.•42 views

CVE-2023-0055 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

3.1CVSS4.1AI score0.00452EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/01/04 12:00 a.m.•23 views

pyload security vulnerability

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible, and fully manageable over the Web. pyload is a free and open source download manager written in Python. A security vulnerability exists in versions prior to pyload...

5.3CVSS4.9AI score0.00452EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/04 12:00 a.m.•112 views

CVE-2023-0055

CVE-2023-0055 affects the pyload/pyload project prior to version 0.5.0b3.dev32. The issue is leaking cookies in HTTPS sessions because the Secure attribute is not set on sensitive cookies, potentially allowing plaintext transmission. A fix is available in version 0.5.0b3.dev32. No exploitation de...

5.3CVSS5.6AI score0.00452EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/04 12:00 a.m.•7 views

CVE-2023-0055: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

5.3CVSS5.8AI score0.00452EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/04 12:00 a.m.•66 views

CVE-2023-0055 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

3.1CVSS5.5AI score0.00452EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/01/04 12:00 a.m.•13 views

CVE-2023-0055 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

3.1CVSS3.8AI score0.00452EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/01/04 12:00 a.m.•14 views

PT-2023-15974

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev32 Description The issue concerns a sensitive cookie in HTTPS sessions without the 'Secure' attribute set. This could cause the user agent to send those cookies in plaintext over an HTTP session...

5.3CVSS5.9AI score0.00452EPSS
SaveExploits1References12
Rows per page
Query Builder