Lucene search
+L

695 matches found

OpenVAS
OpenVAS
added 2024/07/01 12:00 a.m.8 views

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2024-1875)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00336EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2024/06/28 5:08 a.m.60 views

CVE-2024-5642

A vulnerability was found in Python/CPython that does not disallow configuring an empty list "" for SSLContext.setnpnprotocols, which is an invalid value for the underlying OpenSSL API. This issue results in a buffer over-read when NPN is used. See CVE -2024-5535 for OpenSSL for more information...

2.7CVSS6.5AI score0.00744EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/06/28 12:00 a.m.34 views

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2024-1875)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.The...

7.8CVSS6.9AI score0.00336EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/06/28 12:00 a.m.36 views

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2024-1861)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.The...

7.8CVSS6.9AI score0.00336EPSS
SaveExploits0References3
NVD
NVD
added 2024/06/27 9:15 p.m.40 views

CVE-2024-5642

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.5CVSS0.00744EPSS
SaveExploits1References8
UbuntuCve
UbuntuCve
added 2024/06/27 9:15 p.m.53 views

CVE-2024-5642

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.5CVSS6.9AI score0.00744EPSS
SaveExploits1References5
OSV
OSV
added 2024/06/27 9:05 p.m.32 views

CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.5CVSS7.1AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2024/06/27 9:05 p.m.113 views

CVE-2024-5642

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.5CVSS6.3AI score0.00744EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/06/27 9:05 p.m.41 views

CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.8AI score0.00744EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2024/06/27 9:05 p.m.45 views

CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

0.00744EPSS
SaveExploits1References8
CVE
CVE
added 2024/06/27 9:05 p.m.1518 views

CVE-2024-5642

CVE-2024-5642 affects CPython 3.9 and earlier where CPython allows an empty list for SSLContext.set_npn_protocols(), an invalid value for the OpenSSL API. The underlying issue is a buffer over-read when NPN is used, related to CVE-2024-5535 (OpenSSL). The vulnerability is characterized as low sev...

6.5CVSS7.6AI score0.00744EPSS
SaveExploits1References8
OSV
OSV
added 2024/06/27 9:05 p.m.36 views

PSF-2024-6

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.5CVSS6.7AI score0.00744EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2024/06/25 12:00 a.m.29 views

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2024-1822)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00336EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/06/25 12:00 a.m.13 views

Fedora: Security Advisory (FEDORA-2024-b26f07d27b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS6.5AI score0.00685EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2024/06/25 12:00 a.m.29 views

EulerOS 2.0 SP11 : python3 (EulerOS-SA-2024-1843)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.The...

7.8CVSS6.9AI score0.00336EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2024/06/25 12:00 a.m.13 views

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2024-1843)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00336EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/25 12:00 a.m.43 views

EulerOS 2.0 SP11 : python3 (EulerOS-SA-2024-1822)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.The...

7.8CVSS6.9AI score0.00336EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2024/06/24 3:51 p.m.31 views

CVE-2023-6507

A flaw was found in Python's subprocess module. When creating a new subprocess, the developer may specify a list of extra groups through the 'extragroups= parameter. When this optional parameter is informed with an empty list, the module fails to properly clean the associated groups from the new...

6.1CVSS6.5AI score0.01326EPSS
SaveExploits0References3
Fedora
Fedora
added 2024/06/24 6:37 a.m.28 views

[SECURITY] Fedora 40 Update: python-PyMySQL-1.1.1-1.fc40

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython...

6.3CVSS6.4AI score0.00685EPSS
SaveExploits1
Fedora
Fedora
added 2024/06/24 1:39 a.m.29 views

[SECURITY] Fedora 39 Update: python-PyMySQL-1.1.1-1.fc39

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython...

6.3CVSS6.4AI score0.00685EPSS
SaveExploits1
Rows per page
Query Builder