Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2013-1633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which...

6.8CVSS6.1AI score0.00765EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:40 a.m.1 views

SUSE CVE-2013-1633

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

6.8CVSS7.8AI score0.00765EPSS
Exploits0References4
OSV
OSV
added 2022/05/17 5:1 a.m.23 views

GHSA-27X4-J476-JP5F Setuptools vulnerable to Man-in-the-middle attacks

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

8.3CVSS6.8AI score0.00765EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/17 5:1 a.m.28 views

Setuptools vulnerable to Man-in-the-middle attacks

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

6.8CVSS7.6AI score0.00765EPSS
Exploits0References5Affected Software1
Fedora
Fedora
added 2018/08/03 8:48 p.m.9 views

[SECURITY] Fedora 28 Update: python-XStatic-jquery-ui-1.12.0.1-2.fc28

JavaScript library packaged for setuptools easyinstall / pip. This package is intended to be used by any project that needs these files. It intentionally does not provide any extra code except some metadata nor has any extra requirements...

1.6AI score
Exploits0
Kitploit
Kitploit
added 2015/09/19 9:4 p.m.26 views

Speedtest - Command Line Interface for Testing Internet Bandwidth

speedtest-cli is a command line interface for testing internet bandwidth using speedtest.net Installation pip / easyinstall pip install speedtest-cli or easyinstall speedtest-cli Github pip install git+https://github.com/sivel/speedtest-cli.git or git clone...

7.5AI score
Exploits0References1
Fedora
Fedora
added 2015/01/06 6:7 a.m.10 views

[SECURITY] Fedora 21 Update: python-pip-1.5.6-3.fc21

Pip is a replacement for easyinstall . It uses mostly the same techniques for finding packages, so packages that were made easyinstallable should be pip-installable as well...

0.4AI score
Exploits0
Prion
Prion
added 2013/08/06 2:52 a.m.18 views

Design/Logic Flaw

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

6.8CVSS7.7AI score0.00765EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2013/08/06 2:52 a.m.24 views

CVE-2013-1633

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

6.8CVSS6AI score0.00765EPSS
Exploits0References3
PyPA
PyPA
added 2013/08/06 2:52 a.m.4 views

PYSEC-2013-22

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

6.8CVSS7.8AI score0.00765EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2013/08/06 2:52 a.m.27 views

PYSEC-2013-22

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

6.8CVSS5.2AI score0.00765EPSS
Exploits0References2
Cvelist
Cvelist
added 2013/08/06 1:0 a.m.29 views

CVE-2013-1633

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

7AI score0.00765EPSS
Exploits0References2
CVE
CVE
added 2013/08/06 1:0 a.m.56 views

CVE-2013-1633

CVE-2013-1633 affects setuptools’ easy_install, where prior to version 0.7 it retrieved packages over HTTP without integrity checks, enabling MITM execution of arbitrary code. Affected component: python-setuptools/setuptools. Impact: remote code execution via crafted responses. Root cause: lack o...

6.8CVSS7.1AI score0.00765EPSS
Exploits0References2Affected Software1
Fedora
Fedora
added 2013/07/26 12:32 a.m.20 views

[SECURITY] Fedora 17 Update: python-pip-1.3.1-4.fc17

Pip is a replacement for easyinstall . It uses mostly the same techniques for finding packages, so packages that were made easyinstallable should be pip-installable as well...

4.3CVSS0.4AI score0.02979EPSS
Exploits0
OpenVAS
OpenVAS
added 2013/05/06 12:0 a.m.24 views

Fedora Update for python-pip FEDORA-2013-6762

Check for the Version of python-pip OpenVAS Vulnerability Test Fedora Update for python-pip FEDORA-2013-6762 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

6.9CVSS6.4AI score0.00085EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/05/06 12:0 a.m.21 views

Fedora Update for python-pip FEDORA-2013-6727

Check for the Version of python-pip OpenVAS Vulnerability Test Fedora Update for python-pip FEDORA-2013-6727 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

6.9CVSS6.4AI score0.00085EPSS
Exploits0References2
Fedora
Fedora
added 2013/05/02 4:32 a.m.26 views

[SECURITY] Fedora 19 Update: python-pip-1.3.1-1.fc19

Pip is a replacement for easyinstall . It uses mostly the same techniques for finding packages, so packages that were made easyinstallable should be pip-installable as well...

2.1CVSS0.4AI score0.00085EPSS
Exploits0
Rows per page
Query Builder