[SECURITY] Fedora 38 Update: bottles-51.6-1.fc38

Easily manage Wine prefix in a new way! Run Windows software and games on Linux. Features: Create bottles based on environments a set of rule and dependencies for better software compatibility Access to a customizable environment for all your experiments Run every executable .exe/.msi in your...

Bottle 安全漏洞

Bottle is a simple and lightweight Python-based WSGI micro web framework from the Bottle community. A security vulnerability exists in Bottles prior to version 51.0, which stems from an error handling YAML that allows remote code execution via a crafted file...

Important: python-bottle

Issue Overview: Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. CVE-2022-3179 Bottle before 0.12.20 mishandles errors during early request binding. CVE-2022-31799 Affected Packages: python-bottle Issue Correction: Run dnf update python-bottle --releasever...

Amazon Linux 2023 : python3-bottle (ALAS2023-2023-082)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-082 advisory. Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. CVE-2022-3179 Bottle before 0.12.20 mishandles errors during early request binding. CVE-2022-31799 Tenable has...

Debian: Security Advisory (DLA-761)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3743)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2014-3137

Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; semi-colon and a Content-Type that would not be accepted, as...

SUSE CVE-2016-9964

redirect in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect"233\r\nSet-Cookie: name=salt" call...

SUSE CVE-2020-28473

The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon ;, they can cause a difference in the interpretation of the request between the proxy running with...

SUSE CVE-2022-31799

Bottle before 0.12.20 mishandles errors during early request binding...

Ubuntu: Security Advisory (USN-5532-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-125065

A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is 99cfbcc0c1429096e3479744223ffb4fda276875. It is recommended to apply a patch to fix this issue. The identifier o...

Sql injection

A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is 99cfbcc0c1429096e3479744223ffb4fda276875. It is recommended to apply a patch to fix this issue. The identifier o...

CVE-2014-125065 john5223 bottle-auth sql injection

A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is 99cfbcc0c1429096e3479744223ffb4fda276875. It is recommended to apply a patch to fix this issue. The identifier o...

CVE-2014-125065 john5223 bottle-auth sql injection

A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is 99cfbcc0c1429096e3479744223ffb4fda276875. It is recommended to apply a patch to fix this issue. The identifier o...

CVE-2014-125065

Affected software: john5223 bottle-auth. Vulnerability: SQL injection caused by manipulation of an unknown function. This CVE (CVE-2014-125065) is documented with critical impact; multiple sources confirm the issue and reference a patch named 99cfbcc0c1429096e3479744223ffb4fda276875. Impact: High...

PT-2023-10135 · Unknown · Bottle-Auth

Name of the Vulnerable Software and Affected Versions: john5223 bottle-auth affected versions not specified Description: A critical issue was found in john5223 bottle-auth, affecting an unknown function, which leads to sql injection. Recommendations: To fix this issue, it is recommended to apply ...

bottle-auth SQL注入漏洞

bottle-auth is an application by John C Personal Developer. A SQL injection vulnerability exists in bottle-auth. An attacker could exploit this vulnerability to perform a sql injection attack...

Amazon Linux 2 : python-bottle (ALAS-2022-1844)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1844 advisory. Bottle before 0.12.20 mishandles errors during early request binding. CVE-2022-31799 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that...

Medium: python-bottle

Issue Overview: Bottle before 0.12.20 mishandles errors during early request binding. CVE-2022-31799 Affected Packages: python-bottle Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issu...