Lucene search
+L

432 matches found

RedHat Linux
RedHat Linux
added 2024/01/18 4:31 p.m.11 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.26 views

EulerOS 2.0 SP10 : python-pip (EulerOS-SA-2023-2821)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirect...

6.1CVSS7.1AI score0.02974EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/06 12:0 a.m.8 views

PT-2023-23689 · Micro Focus · Filr

Name of the Vulnerable Software and Affected Versions: Filr affected versions not specified Description: The issue allows an authenticated administrator equivalent Filr user to access the credentials of proxy administrators. Recommendations: At the moment, there is no information about a newer...

7.2CVSS6.8AI score0.00676EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/14 4:5 p.m.7 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/11/14 3:53 p.m.564 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/11/14 3:43 p.m.6 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/11/08 2:26 p.m.8 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2023/10/10 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for python-requests (EulerOS-SA-2023-2927)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS7AI score0.02974EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for python-requests (EulerOS-SA-2023-2741)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS7AI score0.02974EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2023/08/21 9:53 p.m.4 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/08/08 8:26 a.m.8 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/08/01 8:55 a.m.7 views

python-requests: Unintended leak of Proxy-Authorization header

A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization...

6.1CVSS6.6AI score0.02974EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2023/07/20 12:0 a.m.27 views

Amazon Linux 2 : python-requests (ALAS-2023-2110)

The version of python-requests installed on the remote host is prior to 2.6.0-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2110 advisory. A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy- Authorization header...

6.1CVSS7.1AI score0.02974EPSS
SaveExploits1References4
OSV
OSV
added 2023/06/28 5:21 a.m.17 views

MGASA-2023-0210 Updated python-requests packages fix security vulnerability

Forwarding proxy credentials to the destination server unintentionally CVE-2023-32681...

6.1CVSS6.5AI score0.02974EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/26 12:0 a.m.3 views

Requests 信息泄露漏洞

Requests is an elegant and simple HTTP library from the Python Foundation. With Requests, you can send HTTP / 1.1 requests very easily. There is no need to manually add query strings to your URLs or form-encode POST data. A security vulnerability exists in Requests versions prior to 2.31.0 that...

6.1CVSS7.2AI score0.02974EPSS
SaveExploits1References20
OSV
OSV
added 2023/04/25 7:15 p.m.8 views

CVE-2023-28086

An HPE OneView appliance dump may expose proxy credential settings...

5.5CVSS6.1AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/25 6:39 p.m.9 views

CVE-2023-28086

An HPE OneView appliance dump may expose proxy credential settings...

5.6AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.9 views

Hewlett Packard Enterprise OneView 安全漏洞

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView that stems from a device dump that could expose proxy credential settings...

5.5CVSS5.7AI score0.0017EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2023/03/28 9:30 p.m.25 views

Veracode Scan Jenkins Plugin vulnerable to information disclosure

Veracode Scan Jenkins Plugin before 23.3.19.0 is vulnerable to information disclosure of proxy credentials in job logs under specific configurations. Users are potentially affected if they: - are using Veracode Scan Jenkins Plugin prior to 23.3.19.0 - AND have configured Veracode Scan to run on...

6.5CVSS5.9AI score0.00647EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/03/28 9:30 p.m.90 views

GHSA-C4JR-VJM4-27HQ Veracode Scan Jenkins Plugin vulnerable to information disclosure

Veracode Scan Jenkins Plugin before 23.3.19.0 is vulnerable to information disclosure of proxy credentials in job logs under specific configurations. Users are potentially affected if they: - are using Veracode Scan Jenkins Plugin prior to 23.3.19.0 - AND have configured Veracode Scan to run on...

4.4CVSS5.3AI score0.00647EPSS
SaveExploits0References5
Rows per page
Query Builder