Lucene search
+L

356 matches found

OSV
OSV
•added 2021/05/06 1:15 p.m.•3 views

DEBIAN-CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS7.3AI score0.06882EPSS
SaveExploits1References1
OSV
OSV
•added 2021/05/06 1:15 p.m.•8 views

ALPINE-CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS6.9AI score0.06882EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/06 1:15 p.m.•25 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS0.06882EPSS
SaveExploits1References17
Prion
Prion
•added 2021/05/06 1:15 p.m.•97 views

Improper access control

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS8.3AI score0.06882EPSS
SaveExploits1References16Affected Software6
UbuntuCve
UbuntuCve
•added 2021/05/06 1:15 p.m.•56 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS6.9AI score0.06882EPSS
SaveExploits1References12
OSV
OSV
•added 2021/05/06 1:15 p.m.•13 views

UBUNTU-CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS7.1AI score0.06882EPSS
SaveExploits1References13
Cvelist
Cvelist
•added 2021/05/06 12:00 a.m.•47 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.6AI score0.06882EPSS
SaveExploits1References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•6 views

CVE-2021-29921: Undefined Security Weakness

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS5.8AI score0.06882EPSS
SaveExploits1References1
CVE
CVE
•added 2021/05/06 12:00 a.m.•5280 views

CVE-2021-29921

CVE-2021-29921 affects the ipaddress module in Python, where leading zeros in IPv4 octets are mishandled, potentially bypassing IP-based access controls. The issue is addressed by Python 3.9.5 and later; many advisories (Debian, AlmaLinux, Alpine, etc.) reference updates or security trackers conf...

9.8CVSS9.3AI score0.06882EPSS
SaveExploits1References17Affected Software1
AlpineLinux
AlpineLinux
•added 2021/05/06 12:00 a.m.•61 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS9.6AI score0.06882EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/05/06 12:00 a.m.•310 views

CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS8AI score0.06882EPSS
SaveExploits1
OSV
OSV
•added 2021/05/06 12:00 a.m.•59 views

PSF-2021-2 ipaddress leading zeros in IPv4 address

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS9.5AI score0.06882EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2021/05/05 7:49 p.m.•93 views

CVE-2021-29921

A flaw was found in python-ipaddress. Improper input validation of octal strings in stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. The highest threat from this vulnerability is to...

9.8CVSS5AI score0.06882EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2021/05/05 12:00 a.m.•22 views

FreeBSD : Python -- multiple vulnerabilities (bffa40db-ad50-11eb-86b8-080027846a02)

Python reports : bpo-43434: Creating a sqlite3.Connection object now also produces a sqlite3.connect auditing event. Previously this event was only produced by sqlite3.connect calls. Patch by Erlend E. Aasland. bpo-43882: The presence of newline or tab characters in parts of a URL could allow som...

5.5AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2021/04/30 12:00 a.m.•10 views

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability in Python stdlib ipaddress 3.10 and below allows unauthenticated, remote attackers to...

9.8CVSS7.5AI score0.06882EPSS
SaveExploits1References36
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•18 views

SUSE: Security Advisory (SUSE-SU-2020:2157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.2AI score0.12706EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•15 views

SUSE: Security Advisory (SUSE-SU-2020:1920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.2AI score0.12706EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/01/20 12:00 a.m.•38 views

EulerOS 2.0 SP3 : python-ipaddress (EulerOS-SA-2021-1115)

According to the version of the python-ipaddress package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow...

5.9CVSS7.1AI score0.12706EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/01/19 12:00 a.m.•22 views

Huawei EulerOS: Security Advisory for python-ipaddress (EulerOS-SA-2021-1115)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.2AI score0.12706EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2021/01/15 4:40 a.m.•98 views

Exploit for Deserialization of Untrusted Data in Rubyonrails Rails

CVE-2020-8165.py A shell for CVE-2020-8...

9.8CVSS9.3AI score0.45732EPSS
SaveExploits5
Rows per page
Query Builder