Lucene search
+L

40 matches found

Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•17 views

RHEL 4 : python (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python: buffer integer overflow leading to out of bounds read CVE-2014-7185 - Python CGIHandler: sets...

5.3CVSS7.8AI score0.05122EPSS
SaveExploits6References7
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•28 views

RHEL 4 : python_cgihandler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Python CGIHandler: sets environmental variable based on user supplied Proxy request header CVE-2016-1000110 Note th...

6.4AI score0.04526EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•53 views

K75004031: Python vulnerability CVE-2016-1000110

Security Advisory Description The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests. CVE-2016-1000110 Impact There is no impact; F5 products are not affected by this...

6.1CVSS7.4AI score0.04526EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 4:53 a.m.•11 views

SUSE CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS9.1AI score0.04526EPSS
SaveExploits0References29
OpenVAS
OpenVAS
•added 2021/10/06 12:00 a.m.•37 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Mac OS X

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/10/06 12:00 a.m.•47 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Linux

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/10/06 12:00 a.m.•18 views

Python < 2.7.13, 3.3.x < 3.3.7, 3.4.x < 3.4.6, 3.5.x < 3.5.3 HTTPoxy attack (bpo-27568) - Windows

The CGIHandler class in Python is prone to redirection of HTTP requests. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•81 views

SUSE: Security Advisory (SUSE-SU-2016:2653-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.2548EPSS
SaveExploits7References11
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•83 views

SUSE: Security Advisory (SUSE-SU-2016:2859-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.2548EPSS
SaveExploits7References11
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•82 views

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2016-1036)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.14524EPSS
SaveExploits6References2
NVD
NVD
•added 2019/11/27 5:15 p.m.•23 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.4AI score0.04526EPSS
SaveExploits0References5
OSV
OSV
•added 2019/11/27 5:15 p.m.•52 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.1AI score
SaveExploits0References5
Prion
Prion
•added 2019/11/27 5:15 p.m.•36 views

Design/Logic Flaw

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

5.8CVSS6.8AI score0.04526EPSS
SaveExploits0References5Affected Software3
OSV
OSV
•added 2019/11/27 4:54 p.m.•41 views

PSF-2019-2 HTTPoxy attack

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.5AI score0.04526EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/11/27 4:54 p.m.•47 views

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.3AI score0.04526EPSS
SaveExploits0References5
CVE
CVE
•added 2019/11/27 4:54 p.m.•309 views

CVE-2016-1000110

The CVE-2016-1000110 issue affects Python’s CGIHandler class prior to 2.7.12, where the HTTP_PROXY environment variable name clash in a CGI script could allow a remote attacker to redirect outgoing HTTP requests. Public advisories and vendor notices (Debian/Red Hat/CentOS, Ubuntu USN, Cloud Found...

6.1CVSS6.2AI score0.04526EPSS
SaveIn wildExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2019/11/27 4:54 p.m.•60 views

CVE-2016-1000110

Removed by vendor...

6.1CVSS7.1AI score0.04526EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/27 12:00 a.m.•2 views

CVE-2016-1000110: URL Redirection to Untrusted Site

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

6.1CVSS6.6AI score0.04526EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/05/02 5:46 a.m.•35 views

Open Redirection

python is vulnerable to Open Redirection vulnerability. The vulnerability exists because Python CGIHandler class does not properly protect against the HTTPPROXY variable name clash in a CGI context. Remote attackers could redirect HTTP requests performed by a Python CGI script to an...

6.1CVSS6.4AI score0.04526EPSS
SaveExploits0References10Affected Software7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•4 views

CVE-2017-17562: Undefined Security Weakness

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...

8.1CVSS7.6AI score0.96262EPSS
SaveExploits15References2
Rows per page
Query Builder