Lucene search
+L

642 matches found

Github Security Blog
Github Security Blog
added 2022/12/23 12:30 a.m.103 views

Python Charmers Future denial of service vulnerability

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. This issue has been patched in version 0.18.3...

7.5CVSS7AI score0.01819EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2022/12/23 12:30 a.m.20 views

GHSA-V3C5-JQR6-7QM8 Python Charmers Future denial of service vulnerability

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. This issue has been patched in version 0.18.3...

8.7CVSS6.5AI score0.01819EPSS
SaveExploits1References9
OSV
OSV
added 2022/12/23 12:15 a.m.5 views

DEBIAN-CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS6.6AI score0.01819EPSS
SaveExploits1References1
NVD
NVD
added 2022/12/23 12:15 a.m.30 views

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS0.01819EPSS
SaveExploits1References5
Prion
Prion
added 2022/12/23 12:15 a.m.28 views

Code injection

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

5CVSS7.1AI score0.01819EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/12/23 12:15 a.m.16 views

UBUNTU-CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS6.8AI score0.01819EPSS
SaveExploits1References8
PyPA
PyPA
added 2022/12/23 12:15 a.m.11 views

PYSEC-2022-42991

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS7.3AI score0.01819EPSS
SaveExploits1References9Affected Software1
CNNVD
CNNVD
added 2022/12/23 12:00 a.m.9 views

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python Charmers Future version 0.18.2 and earlier. An attacker can exploit this...

7.5CVSS6.8AI score0.01819EPSS
SaveExploits1References9
UbuntuCve
UbuntuCve
added 2022/12/23 12:00 a.m.81 views

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS6.8AI score0.01819EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2022/12/22 12:00 a.m.7 views

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.3AI score0.01819EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2022/12/22 12:00 a.m.37 views

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5AI score0.01819EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/12/22 12:00 a.m.15 views

PT-2022-6568

Name of the Vulnerable Software and Affected Versions Python Charmers Future versions 0.18.2 and earlier Description The issue is related to improper input validation when handling the Set-Cookie header, allowing a remote attacker to send a specially crafted HTTP request and perform a denial of...

8.7CVSS6.6AI score0.01819EPSS
SaveExploits1References50
Debian CVE
Debian CVE
added 2022/12/22 12:00 a.m.39 views

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS6.7AI score0.01819EPSS
SaveExploits1
OSV
OSV
added 2022/12/22 12:00 a.m.35 views

CVE-2022-40899

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...

7.5CVSS7.2AI score
SaveExploits0References7
OSV
OSV
added 2022/12/13 10:09 p.m.13 views

MGASA-2022-0454 Updated ruby packages fix security vulnerability

If an application that generates HTTP responses using the cgi gem with untrusted user input, an attacker can exploit it to inject a malicious HTTP response header and/or body. Also, the contents for a CGI::Cookie object were not checked properly. If an application creates a CGI::Cookie object bas...

8.8CVSS8.6AI score0.02352EPSS
SaveExploits1References4
Mageia
Mageia
added 2022/12/13 10:09 p.m.59 views

Updated ruby packages fix security vulnerability

If an application that generates HTTP responses using the cgi gem with untrusted user input, an attacker can exploit it to inject a malicious HTTP response header and/or body. Also, the contents for a CGI::Cookie object were not checked properly. If an application creates a CGI::Cookie object bas...

8.8CVSS0.7AI score0.02352EPSS
SaveExploits1References3
RubySec
RubySec
added 2022/11/22 12:00 a.m.72 views

HTTP response splitting in CGI

If an application that generates HTTP responses using the cgi gem with untrusted user input, an attacker can exploit it to inject a malicious HTTP response header and/or body. Also, the contents for a CGI::Cookie object were not checked properly. If an application creates a CGI::Cookie object bas...

8.8CVSS6.9AI score0.02352EPSS
SaveExploits1References1Affected Software1
FreeBSD
FreeBSD
added 2022/11/22 12:00 a.m.33 views

rubygem-cgi -- HTTP response splitting vulnerability

Hiroshi Tokumaru reports: If an application that generates HTTP responses using the cgi gem with untrusted user input, an attacker can exploit it to inject a malicious HTTP response header and/or body. Also, the contents for a CGI::Cookie object were not checked properly. If an application create...

8.8CVSS0.6AI score0.02352EPSS
SaveExploits1References1
Snyk
Snyk
added 2022/11/20 1:31 p.m.14 views

Improper Input Validation

Overview cgi is a Support for the Common Gateway Interface protocol. Affected versions of this package are vulnerable to Improper Input Validation due to improper validation of CGI::Cookie content, which allows an attacker to inject invalid attributes in the Set-Cookie header and insert a newline...

8.8CVSS6.8AI score0.02352EPSS
SaveExploits1References2
OSV
OSV
added 2022/11/11 11:05 a.m.8 views

OESA-2022-2054 haproxy security update

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fixes: A flaw was found i...

7.5CVSS6.6AI score0.16563EPSS
SaveExploits0References2
Rows per page
Query Builder