Lucene search
K

1128 matches found

Tenable Nessus
Tenable Nessus
added 2024/01/19 12:0 a.m.41 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-aiohttp (SUSE-SU-2024:0168-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0168-1 advisory. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation mak...

5.3CVSS6.3AI score0.00221EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2024/01/18 12:0 a.m.29 views

Fedora: Security Advisory for python-aiohttp (FEDORA-2023-a04cc349e1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS5.9AI score0.00457EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2024/01/18 12:0 a.m.22 views

Fedora: Security Advisory for python-aiohttp (FEDORA-2023-1f06098c71)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS5.8AI score0.00457EPSS
Exploits2References2
Fedora
Fedora
added 2024/01/08 1:24 a.m.56 views

[SECURITY] Fedora 39 Update: python-aiohttp-3.9.1-1.fc39

Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webservers with middlewares and pluggable routing...

7.2CVSS6.3AI score0.00457EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2024/01/07 12:0 a.m.31 views

Fedora 38 : python-aiohttp / python-pysqueezebox / python-wled (2023-1f06098c71)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-1f06098c71 advisory. Security fix for CVE-2023-49081, CVE-2023-49082. Update python-aiohttp to 3.9.1. Patch python-pysqeezebox and python-wled so they do not have an...

7.2CVSS6.5AI score0.00457EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2024/01/07 12:0 a.m.36 views

Fedora 39 : python-aiohttp / python-pysqueezebox / python-wled (2023-a04cc349e1)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a04cc349e1 advisory. Security fix for CVE-2023-49081, CVE-2023-49082. Update python-aiohttp to 3.9.1. Patch python-pysqeezebox and python-wled so they do not have an...

7.2CVSS6.5AI score0.00457EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2024/01/06 12:0 a.m.34 views

SUSE SLES15 / openSUSE 15 Security Update : python-aiohttp (SUSE-SU-2024:0034-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0034-1 advisory. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an...

7.2CVSS6.4AI score0.00457EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/01/06 12:0 a.m.27 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-aiohttp (SUSE-SU-2024:0033-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0033-1 advisory. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation mad...

7.2CVSS6.4AI score0.00457EPSS
Exploits1References4
OSV
OSV
added 2024/01/05 8:49 a.m.6 views

SUSE-SU-2024:0034-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2023-49081: fixed an HTTP header injection via a crafted version bsc1217684...

7.2CVSS7.2AI score0.00457EPSS
Exploits1References3
OSV
OSV
added 2024/01/05 8:48 a.m.10 views

SUSE-SU-2024:0033-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2023-49081: fixed an HTTP header injection via a crafted version bsc1217684...

7.2CVSS7.2AI score0.00457EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/12/21 12:0 a.m.24 views

SUSE SLES15 / openSUSE 15 Security Update : python-aiohttp (SUSE-SU-2023:4909-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4909-1 advisory. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security...

6.5CVSS6AI score0.00397EPSS
Exploits1References4
OSV
OSV
added 2023/12/19 3:1 p.m.8 views

SUSE-SU-2023:4909-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2023-47641: Fixed inconsistent interpretation of the http protocol, if content-length and transport-encoding are in the same header with transport-encoding value of 'chunked' bsc1217174...

6.5CVSS6.6AI score0.00397EPSS
Exploits1References3
Veracode
Veracode
added 2023/12/19 6:43 a.m.12 views

Request Smuggling

aiohttp is vulnerable to Request Smuggling. The vulnerability exists due to improper HTTP method validation in this library, which allows attackers to modify HTTP requests...

7AI score
Exploits0
Github Security Blog
Github Security Blog
added 2023/12/13 1:35 p.m.15 views

Improper validation in meraki

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request e.g. to insert a new header or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the...

7.2CVSS7AI score0.00457EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/12/13 1:35 p.m.35 views

GHSA-6X4H-9622-FQR6 Improper validation in meraki

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request e.g. to insert a new header or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the...

7.2CVSS5.9AI score0.00457EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/12/10 12:0 a.m.9 views

Fedora: Security Advisory for python-aiohttp (FEDORA-2023-5130a73b00)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.00239EPSS
Exploits1References2
OSV
OSV
added 2023/12/08 11:6 a.m.2 views

OESA-2023-1900 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request e.g. to insert a new header or create a new HTTP request if the attacker...

7.2CVSS6.8AI score0.00457EPSS
Exploits1References2
Fedora
Fedora
added 2023/12/07 2:9 a.m.38 views

[SECURITY] Fedora 39 Update: python-aiohttp-3.8.6-1.fc39

Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webservers with middlewares and pluggable routing...

7.5CVSS6.5AI score0.00239EPSS
Exploits1
Fedora
Fedora
added 2023/12/07 1:59 a.m.22 views

[SECURITY] Fedora 38 Update: python-aiohttp-3.8.6-1.fc38

Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webservers with middlewares and pluggable routing...

7.5CVSS6.5AI score0.00239EPSS
Exploits1
OpenVAS
OpenVAS
added 2023/12/07 12:0 a.m.17 views

Fedora: Security Advisory for python-aiohttp (FEDORA-2023-bc1f081ca0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00239EPSS
Exploits1References2
Rows per page
Query Builder