Lucene search
K

115 matches found

Tenable Nessus
Tenable Nessus
added 2023/08/25 12:0 a.m.22 views

Fedora 38 : youtube-dl (2023-1f11546a48)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1f11546a48 advisory. Update to latest upstream git snapshot. Various changes, including bug fix for cookie leak vulnerability. Tenable has extracted the preceding description blo...

8.2CVSS7.7AI score0.00902EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/06/16 12:0 a.m.14 views

Mageia: Security Advisory (MGASA-2023-0196)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.01625EPSS
Exploits1References4
Mageia
Mageia
added 2023/06/15 7:27 a.m.30 views

Updated httpie packages fix security vulnerability

Cookie exposure to third parties CVE-2022-24737...

6.5CVSS7AI score0.01625EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:13 a.m.2 views

SUSE CVE-2019-10751

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control...

8.8CVSS8.7AI score0.02028EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:35 a.m.4 views

SUSE CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS4AI score0.01272EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2022/03/27 12:0 a.m.16 views

Fedora: Security Advisory for httpie (FEDORA-2022-307d72ff7d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.01625EPSS
Exploits1References2
Fedora
Fedora
added 2022/03/26 3:44 p.m.26 views

[SECURITY] Fedora 36 Update: httpie-3.1.0-1.fc36

HTTPie is a CLI HTTP utility built out of frustration with existing tools. The goal is to make CLI interaction with HTTP-based services as human-friendly as possible. HTTPie does so by providing an http command that allows for issuing arbitrary HTTP requests using a simple and natural syntax and...

6.5CVSS6.6AI score0.01625EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/03/23 12:0 a.m.19 views

Fedora: Security Advisory for httpie (FEDORA-2022-fbf40ae0e4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.01625EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/03/23 12:0 a.m.25 views

Fedora: Security Advisory for httpie (FEDORA-2022-cfcad08594)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.01625EPSS
Exploits1References2
Fedora
Fedora
added 2022/03/17 2:42 p.m.31 views

[SECURITY] Fedora 34 Update: httpie-3.1.0-1.fc34

HTTPie is a CLI HTTP utility built out of frustration with existing tools. The goal is to make CLI interaction with HTTP-based services as human-friendly as possible. HTTPie does so by providing an http command that allows for issuing arbitrary HTTP requests using a simple and natural syntax and...

6.5CVSS6.6AI score0.01625EPSS
Exploits1
Veracode
Veracode
added 2022/03/16 8:50 a.m.18 views

Information Disclosure

httpie is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of cookies in persistent session allowing the cookies to be visible to all sites in that session...

5.3CVSS1.4AI score0.01272EPSS
Exploits1References2Affected Software1
vulnersOsv
vulnersOsv
added 2022/03/16 12:0 a.m.2 views

dalineunit (>=0.0.31 <=0.0.69), encapsia-cli (>=0.1.8 <=0.5.1) +5 more potentially affected by CVE-2022-0430 via httpie (>=1.0.3 <=2.6.0)

httpie PYPI version =1.0.3, =0.0.31, =0.1.8, =0.0.14, =1.0.0, =1.3.21, =1.9.24 - veracode-api-signing =21.3.0 Source cves: CVE-2022-0430 Source advisory: OSV:GHSA-6PC9-XQRG-WFQW...

5.3CVSS5.8AI score0.01272EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/03/16 12:0 a.m.29 views

Exposure of Sensitive information in httpie

httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0...

5.3CVSS1.6AI score0.01272EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/03/16 12:0 a.m.17 views

GHSA-6PC9-XQRG-WFQW Exposure of Sensitive information in httpie

httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0...

4.8CVSS5.2AI score0.01272EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2022/03/15 3:15 p.m.4 views

CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.4AI score0.01272EPSS
Exploits1References3
OSV
OSV
added 2022/03/15 3:15 p.m.1 views

DEBIAN-CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS4.6AI score0.01272EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2022/03/15 3:15 p.m.1 views

dalineunit (>=0.0.31 <=0.0.69), encapsia-cli (>=0.1.8 <=0.5.1) +5 more potentially affected by CVE-2022-0430 via httpie (>=1.0.3 <=2.6.0)

httpie PYPI version =1.0.3, =0.0.31, =0.1.8, =0.0.14, =1.0.0, =1.3.21, =1.9.24 - veracode-api-signing =21.3.0 Source cves: CVE-2022-0430 Source advisory: OSV:PYSEC-2022-167...

5.3CVSS5.8AI score0.01272EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2022/03/15 3:15 p.m.25 views

CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.9AI score0.01272EPSS
Exploits1References3
PyPA
PyPA
added 2022/03/15 3:15 p.m.5 views

PYSEC-2022-167

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS6.7AI score0.01272EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/03/15 3:15 p.m.1 views

UBUNTU-CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.8AI score0.01272EPSS
Exploits1References4
Rows per page
Query Builder