Lucene search
+L

74 matches found

Tenable Nessus
Tenable Nessus
added 2020/07/21 12:00 a.m.48 views

NewStart CGSL MAIN 6.01 : python-pip Multiple Vulnerabilities (NS-SA-2020-0035)

The remote NewStart CGSL host, running version MAIN 6.01, has python-pip packages installed that are affected by multiple vulnerabilities: - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA...

9.8CVSS7AI score0.07443EPSS
SaveExploits3References5
zdt
zdt
added 2019/09/30 12:00 a.m.131 views

phpIPAM 1.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications !/usr/bin/env python3 Exploit Title: phpIPAM Custom Field Filter SQL Injection Exploit Announcement Date: September 16, 2019 5:18 AM Exploit Creation Date: September 27, 2019 Exploit Author: Kevin Kirsche Vendor Homepage: https://phpipam.net...

7.5CVSS0.1AI score0.10318EPSS
SaveExploits6
RedHat Linux
RedHat Linux
added 2019/08/06 1:16 p.m.92 views

Low: Red Hat Security Advisory: python-requests security update

An update for python-requests is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS6.7AI score0.07443EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2018/10/26 12:00 a.m.32 views

Ubuntu: Security Advisory (USN-3790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.07443EPSS
SaveExploits2References2
OSV
OSV
added 2018/10/09 5:29 p.m.4 views

DEBIAN-CVE-2018-18074

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network...

7.5CVSS9.4AI score0.07443EPSS
SaveExploits2References1
NVD
NVD
added 2018/10/09 5:29 p.m.21 views

CVE-2018-18074

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network...

7.5CVSS7.6AI score0.07443EPSS
SaveExploits2References10
Prion
Prion
added 2018/10/09 5:29 p.m.25 views

Authorization

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network...

5CVSS8.3AI score0.07443EPSS
SaveExploits2References10Affected Software6
OSV
OSV
added 2018/10/09 5:29 p.m.112 views

PYSEC-2018-28

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network...

7.5CVSS3.6AI score0.07443EPSS
SaveExploits2References10
Cvelist
Cvelist
added 2018/10/09 3:00 p.m.48 views

CVE-2018-18074

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network...

7.8AI score0.07443EPSS
SaveExploits2References10
exploitpack
exploitpack
added 2017/07/05 12:00 a.m.15 views

Lepide Auditor Suite - createdb() Web Console Database Injection Remote Code Execution

Lepide Auditor Suite - createdb Web Console Database Injection Remote Code Execution !/usr/bin/python """ Lepide Auditor Suite createdb Web Console Database Injection Remote Code Execution Vulnerability Vendor: http://www.lepide.com/ File: lepideauditorsuite.zip SHA1:...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/03/17 12:00 a.m.26 views

Ubuntu: Security Advisory (USN-2531-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6AI score0.03424EPSS
SaveExploits0References2
Debian
Debian
added 2015/01/30 3:54 p.m.106 views

[SECURITY] [DSA 3146-1] requests security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3146-1 [email protected] http://www.debian.org/security/ Sebastien Delafond January 30, 2015 http://www.debian.org/security/faq -...

5CVSS6AI score0.022EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2015/01/29 12:00 a.m.36 views

Debian: Security Advisory (DSA-3146-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.022EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2014/10/15 12:00 a.m.27 views

Ubuntu: Security Advisory (USN-2382-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.022EPSS
SaveExploits0References2
Rows per page
Query Builder