Lucene search
K

270 matches found

OSV
OSV
added 2019/08/31 6:20 p.m.4 views

OPENSUSE-SU-2019:2039-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. This update was imported from the SUSE:SLE-15:Update update...

9.8CVSS9.3AI score0.0189EPSS
Exploits3References4
OPENSUSE Linux
OPENSUSE Linux
added 2019/08/31 12:0 a.m.289 views

Security update for python-SQLAlchemy (important)

openSUSE Security Update: Security update for python-SQLAlchemy Announcement ID: openSUSE-SU-2019:2039-1 Rating: important References: 1124593 Cross-References: CVE-2019-7164 CVE-2019-7548 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description...

9.8CVSS9.7AI score0.0189EPSS
Exploits3References1
Tenable Nessus
Tenable Nessus
added 2019/08/30 12:0 a.m.29 views

SUSE SLED15 / SLES15 Security Update : python-SQLAlchemy (SUSE-SU-2019:2253-1)

This update for python-SQLAlchemy fixes the following issues : Security issues fixed : CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. Note that Tenable Network Security has extracted the preceding...

9.8CVSS8.4AI score0.0189EPSS
Exploits3References6
OSV
OSV
added 2019/08/29 4:53 p.m.7 views

SUSE-SU-2019:2253-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593...

9.8CVSS9.2AI score0.0189EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2019/08/26 12:0 a.m.42 views

SUSE SLED15 / SLES15 Security Update : python-SQLAlchemy (SUSE-SU-2019:2211-1)

This update for python-SQLAlchemy fixes the following issues : Security issues fixed : CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. Note that Tenable Network Security has extracted the preceding...

9.8CVSS8.4AI score0.0189EPSS
Exploits3References6
OSV
OSV
added 2019/08/23 12:46 p.m.5 views

SUSE-SU-2019:2211-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593...

9.8CVSS9.2AI score0.0189EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.36 views

Oracle Linux 8 : python36:3.6 (ELSA-2019-0984)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0984 advisory. - Rebase to 1.3.2 to fix CVE-2019-7164 and CVE-2019-7548 Resolves: rhbz1693978 Tenable has extracted the preceding description block directly from the...

9.8CVSS8.1AI score0.0189EPSS
Exploits3References3
Oracle linux
Oracle linux
added 2019/07/30 12:0 a.m.57 views

python27:2.7 security update

Cython 0.28.1-7 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 PyYAML 3.12-16 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 babel 2.5.1-9 - Bumping due to problems with modular RPM upgrade path 1695587 - Related:...

9.8CVSS1.1AI score0.08764EPSS
Exploits3
Oracle linux
Oracle linux
added 2019/07/30 12:0 a.m.48 views

python36:3.6 security update

python-PyMySQL 0.8.0-10 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils 0.14-12 - Bumping due to problems with modular RPM upgrade path 169558...

9.8CVSS1.3AI score0.0189EPSS
Exploits3
CNVD
CNVD
added 2019/05/27 12:0 a.m.1 views

ORM Injection Vulnerability in sqlalchemy

SQLAlchemy is a Python SQL toolkit and database object mapping framework. An ORM injection vulnerability exists in sqlalchemy, which can be exploited by an attacker to obtain sensitive database information...

7.8AI score
Exploits0
RedHat Linux
RedHat Linux
added 2019/05/07 4:21 a.m.82 views

Important: Red Hat Security Advisory: python27:2.7 security update

An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS6.9AI score0.08764EPSS
Exploits3References5
RedHat Linux
RedHat Linux
added 2019/05/07 4:21 a.m.2 views

python-sqlalchemy: SQL Injection when the order_by parameter can be controlled

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

9.8CVSS7.5AI score0.0189EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2019/05/07 4:20 a.m.38 views

Moderate: Red Hat Security Advisory: python36:3.6 security update

An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.3AI score0.0189EPSS
Exploits3References3
OSV
OSV
added 2019/05/07 3:40 a.m.25 views

RLSA-2019:0984 Moderate: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. SQLAlchemy is an...

7.3CVSS9.2AI score0.0189EPSS
Exploits3References3
OSV
OSV
added 2019/05/07 3:40 a.m.33 views

ALSA-2019:0981 Important: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. Security Fixes:...

9.8CVSS9.3AI score0.08764EPSS
Exploits3References4
OSV
OSV
added 2019/05/07 3:40 a.m.27 views

RLSA-2019:0981 Important: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. Security Fixes:...

9.8CVSS9.3AI score0.08764EPSS
Exploits3References4
AlmaLinux
AlmaLinux
added 2019/05/07 3:40 a.m.61 views

Important: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. Security Fixes:...

9.8CVSS9.7AI score0.08764EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2019/05/07 12:0 a.m.32 views

RHEL 8 : python36:3.6 (RHSA-2019:0984)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0984 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

9.8CVSS8.6AI score0.0189EPSS
Exploits3References7
Veracode
Veracode
added 2019/05/02 5:6 a.m.30 views

Denial Of Service (DoS)

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. Changes to the ceph component: In the previous version, launching of nova instances resulted in nova-compute...

4CVSS7.1AI score0.11718EPSS
Exploits0References50Affected Software15
Veracode
Veracode
added 2019/05/02 5:6 a.m.23 views

Weak Encryption

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. Changes to the ceph component: In the previous version, launching of nova instances resulted in nova-compute...

7.5CVSS7.1AI score0.11718EPSS
Exploits0References33Affected Software15
Rows per page
Query Builder