Lucene search
+L

11344 matches found

Tenable Nessus
Tenable Nessus
added 2021/11/11 12:00 a.m.33 views

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

5.7CVSS7.2AI score0.01701EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2021/11/10 8:30 p.m.30 views

FormatFuzzer - A Framework For High-Efficiency, High-Quality Generation And Parsing Of Binary Inputs

FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs. It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format. From a binary template for GIF, for instance,...

6.8AI score
SaveExploits0References9
OSV
OSV
added 2021/11/10 6:15 p.m.26 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS7.2AI score
SaveExploits0References4
OSV
OSV
added 2021/11/10 6:15 p.m.6 views

AZL-86103 CVE-2021-3572 affecting package python-IPy 1.01-13

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.7AI score0.01701EPSS
SaveExploits2References1
OSV
OSV
added 2021/11/10 6:15 p.m.3 views

DEBIAN-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01701EPSS
SaveExploits2References1
NVD
NVD
added 2021/11/10 6:15 p.m.33 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS0.01701EPSS
SaveExploits2References4
Prion
Prion
added 2021/11/10 6:15 p.m.33 views

Design/Logic Flaw

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

3.5CVSS7AI score0.01701EPSS
SaveExploits2References3Affected Software4
UbuntuCve
UbuntuCve
added 2021/11/10 6:15 p.m.59 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01701EPSS
SaveExploits2References6
PyPA
PyPA
added 2021/11/10 6:15 p.m.14 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.7AI score0.01701EPSS
SaveExploits2References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/10 6:15 p.m.5 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS5.6AI score0.01701EPSS
SaveExploits2References5
OSV
OSV
added 2021/11/10 6:15 p.m.95 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS4AI score0.01701EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2021/11/10 5:55 p.m.41 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

6.1AI score0.01701EPSS
SaveExploits2References4
CVE
CVE
added 2021/11/10 5:55 p.m.579 views

CVE-2021-3572

The CVE-2021-3572 issue affects python-pip and stems from how it handles Unicode separators in git references, with the potential to cause a different revision to be installed in a repository. The vulnerability affects data integrity and is mitigated by upgrading to python-pip version 21.1, which...

5.7CVSS5.8AI score0.01701EPSS
SaveExploits2References4Affected Software1
Debian CVE
Debian CVE
added 2021/11/10 5:55 p.m.66 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.9AI score0.01701EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2021/11/09 6:30 p.m.20 views

python-pip: Incorrect handling of unicode separators in git references

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity...

5.7CVSS7.2AI score0.01701EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
added 2021/11/09 12:47 p.m.90 views

Moderate: python38:3.8 and python38-devel:3.8 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

9.8CVSS8.1AI score0.35963EPSS
SaveExploits7References12
Kitploit
Kitploit
added 2021/11/05 11:30 a.m.540 views

PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs credentials used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the network Crawls shared drives in th...

7.4AI score
SaveExploits0References17
Packet Storm
Packet Storm
added 2021/11/04 12:00 a.m.431 views

GitLab Unauthenticated Remote ExifTool Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GitLab Unauthenticated Remote ExifTool Command Injection', 'Description' = %q This module exploits an unauthenticated file upload and command...

10CVSS9AI score0.99981EPSS
SaveExploits56
CNVD
CNVD
added 2021/11/01 12:00 a.m.42 views

GitLab Input Validation Error Vulnerability (CNVD-2021-91185)

GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. GitLab CE/EE is vulnerable to input validation errors, which can be exploited to cause high CPU usage...

5.3CVSS3AI score0.01484EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/01 12:00 a.m.42 views

GitLab Resource Management Error Vulnerability (CNVD-2021-91188)

GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. GitLab CE/EE is vulnerable to a resource management error that could be exploited to cause memory exhaustion using a misformatted TIFF image...

5.3CVSS2.9AI score0.01484EPSS
SaveExploits0References1
Rows per page
Query Builder