7570 matches found
aiohttp Input Validation Error Vulnerability
aiohttp is an open source asynchronous HTTP client/server framework for asyncio and Python. An input validation error vulnerability exists in aiohttp versions prior to 3.7.4, which stems from an open redirection vulnerability. Maliciously crafted pointers can redirect the browser to another websi...
PT-2021-2299
Name of the Vulnerable Software and Affected Versions aiohttp versions prior to 3.7.4 Description The issue is related to an open redirect vulnerability in the aiohttp library, which can allow a remote attacker to conduct phishing attacks using a specially crafted link. This vulnerability is caus...
aiohttp -- open redirect vulnerability
Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the aiohttp.webmiddlewares.normalizepathmiddleware middleware...
aiohttp Detection (HTTP)
HTTP based detection of aiohttp. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112839";...
alcali (>=2018.3.1, <=2019.2.3), ambition-edc (>=0.3.62, <=0.3.72) +79 more potentially affected by CVE-2020-24583 via django (>=2.2.0, <=2.2.15)
django PYPI version =2.2.0, =2018.3.1, =0.3.62, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =1.0.1, =0.0.30, =0.0.1, =0.0.1, =2.0.0, =1.1.34, =1.1.45 - django-country-filter 0.0.1 and more Source cves: CVE-2020-24583 Source advisory: OSV:PYSEC-2020-33...
alcali (>=2018.3.1, <=2019.2.3), ambition-edc (>=0.3.62, <=0.3.72) +79 more potentially affected by CVE-2020-24584 via django (>=2.2.0, <=2.2.15)
django PYPI version =2.2.0, =2018.3.1, =0.3.62, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =1.0.1, =0.0.30, =0.0.1, =0.0.1, =2.0.0, =1.1.34, =1.1.45 - django-country-filter 0.0.1 and more Source cves: CVE-2020-24584 Source advisory: OSV:PYSEC-2020-34...
Vxscan
This is a Python script called Vxscan, which is a comprehensive scanning tool. It is primarily used for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, and SQL injection. T...
aiohttp-apispec (0.7.2), raiden (>=0.10.0, <=0.100.2) potentially affected by CVE-2019-9710 via webargs (4.0.0)
webargs PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webargs and may be impacted: - aiohttp-apispec 0.7.2 - raiden =0.10.0, =0.100.2 Source cves: CVE-2019-9710 Source advisory: OSV:GHSA-8554-JXCW-454Q...
aiohttp-apispec (>=0.7.3, <=0.7.6) potentially affected by CVE-2019-9710 via webargs (4.1.0)
webargs PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on webargs and may be impacted: - aiohttp-apispec =0.7.3, =0.7.6 Source cves: CVE-2019-9710 Source advisory: OSV:GHSA-8554-JXCW-454Q...
aiohttp-apispec (0.7.2), raiden (>=0.10.0, <=0.100.2) potentially affected by CVE-2019-9710 via webargs (4.0.0)
webargs PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webargs and may be impacted: - aiohttp-apispec 0.7.2 - raiden =0.10.0, =0.100.2 Source cves: CVE-2019-9710 Source advisory: OSV:PYSEC-2019-139...
aiohttp-apispec (>=0.7.3, <=0.7.6) potentially affected by CVE-2019-9710 via webargs (4.1.0)
webargs PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on webargs and may be impacted: - aiohttp-apispec =0.7.3, =0.7.6 Source cves: CVE-2019-9710 Source advisory: OSV:PYSEC-2019-139...
aiohttp-apispec (>=0.7.2, <=0.7.6), httpstan (>=0.6.0, <=0.7.6) +2 more potentially affected by CVE-2019-9710 via webargs (>=1.8.1, <=5.1.2)
webargs PYPI version =1.8.1, =0.7.2, =0.6.0, =1.0.1, =0.4.0, =0.100.2 Source cves: CVE-2019-9710 Source advisory: MEND:CVE-2019-9710...
ws-web-aiohttp (>=0.1.0a88, <=0.1.0b19) potentially affected by CVE-2018-1000814 via aiohttp-session (0.8.0)
aiohttp-session PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp-session and may be impacted: - ws-web-aiohttp =0.1.0a88, =0.1.0b19 Source cves: CVE-2018-1000814 Source advisory: OSV:GHSA-MR4X-C4V9-X729...
reliz (0.1.0.dev0) potentially affected by CVE-2018-1000814 via aiohttp-session (2.1.0)
aiohttp-session PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp-session and may be impacted: - reliz 0.1.0.dev0 Source cves: CVE-2018-1000814 Source advisory: GHSA-MR4X-C4V9-X729...
reliz (0.1.0.dev0) potentially affected by CVE-2018-1000814 via aiohttp-session (2.1.0)
aiohttp-session PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp-session and may be impacted: - reliz 0.1.0.dev0 Source cves: CVE-2018-1000814 Source advisory: OSV:GHSA-MR4X-C4V9-X729...
aiohttp-session creates non-expiring sessions
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...
GHSA-MR4X-C4V9-X729 aiohttp-session creates non-expiring sessions
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...
CVE-2018-1000814
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...
PYSEC-2018-35
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...
PYSEC-2018-35
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...