Lucene search
K

38 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в python-setuptools

A vulnerability exists in the packageindex module of pypa/setuptools versions up to 69.1.1, allowing for remote code execution through its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are vulnerable t...

8.8CVSS7.6AI score0.07521EPSS
Exploits0References2
NVD
NVD
added 2026/02/01 1:15 p.m.2 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00055EPSS
Exploits0References4
EUVD
EUVD
added 2026/02/01 12:15 p.m.1 views

EUVD-2021-34760

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00055EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/01 12:15 p.m.2 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.1AI score0.00055EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/01 12:15 p.m.31 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00055EPSS
Exploits0References4
CVE
CVE
added 2026/02/01 12:15 p.m.6 views

CVE-2021-47911

Affiliate Pro 1.7 is affected by multiple reflected cross-site scripting (XSS) vulnerabilities in the index module’s input fields. The attacker-controlled parameters fullname, username, and email can inject scripts to trigger client-side attacks and manipulate browser requests. The CVE details in...

5.4CVSS5.9AI score0.00055EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/01 12:15 p.m.1 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00055EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/01 12:0 a.m.3 views

PT-2026-5556

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00055EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.2 views

MiracleLinux 8 : resource-agents-4.9.0-54.el8_10.4 (AXSA:2024-8815:06)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8815:06 advisory. urllib3: proxy-authorization request header is not stripped during cross-origin redirects CVE-2024-37891 pypa/setuptools: Remote code execution via...

8.8CVSS8.5AI score0.07521EPSS
Exploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/30 7:13 a.m.2 views

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in setuptools

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in setuptools Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download...

8.8CVSS8.3AI score0.07521EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/10/21 1:4 p.m.2 views

CLSA-2025-1761051864 python3-setuptools: Fix of 2 CVEs

CVE-2022-40897: fix Regular Expression Denial of Service ReDoS in packageindex.py - CVE-2024-6345: fix remote code execution in packageindex module...

8.8CVSS7.4AI score0.07521EPSS
Exploits1References1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-25522 Malicious code in log-zeta-resolve-index-module (npm)

The package log-zeta-resolve-index-module was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in log-zeta-resolve-index-module (npm)

The package log-zeta-resolve-index-module was found to contain malicious code...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/06/09 12:0 a.m.6 views

NewStart CGSL MAIN 7.02 : python-setuptools Vulnerability (NS-SA-2025-0086)

The remote NewStart CGSL host, running version MAIN 7.02, has python-setuptools packages installed that are affected by a vulnerability: - A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These...

8.8CVSS7.7AI score0.07521EPSS
Exploits0References3
OSV
OSV
added 2025/02/03 8:56 a.m.1 views

SUSE-SU-2025:20053-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module in pypa/setuptools bsc1228105...

8.8CVSS7.6AI score0.07521EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/02/03 8:56 a.m.4 views

Security update for python-setuptools

This update for python-setuptools fixes the following issues: CVE-2024-6345: Fixed code execution via download functions in the packageindex module in pypa/setuptools bsc1228105 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

7CVSS7.8AI score0.07521EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/10/16 12:6 p.m.2 views

pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

A flaw was found in the packageindex module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to co...

8.8CVSS8.1AI score0.07521EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/10/16 6:48 a.m.2 views

pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

A flaw was found in the packageindex module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to co...

8.8CVSS8.1AI score0.07521EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/10/16 6:42 a.m.1 views

pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

A flaw was found in the packageindex module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to co...

8.8CVSS8.1AI score0.07521EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/09/12 6:34 p.m.2 views

pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

A flaw was found in the packageindex module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to co...

8.8CVSS8.1AI score0.07521EPSS
Exploits0References6
Rows per page
Query Builder