Lucene search
+L

22 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-0151

Malware in sbrugna...

7.5CVSS7.3AI score0.02835EPSS
SaveExploits1References10
Veracode
Veracode
•added 2021/10/13 7:13 p.m.•28 views

Access Restriction Bypass

py-bcrypt is vulnerable to Improper Access Control. The vulnerability exists due to improper handling of concurrent memory access in py-bcrypt module which triggers password hash overwriting, allowing an attacker to bypass security restrictions...

7.5CVSS5.4AI score0.02835EPSS
SaveExploits1References7Affected Software1
osv-ghsa
osv-ghsa
•added 2021/10/12 4:31 p.m.•31 views

GHSA-R838-Q6JP-58XX Improper Restriction of Excessive Authentication Attempts in py-bcrypt

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

8.7CVSS7.6AI score0.02835EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2021/10/12 4:31 p.m.•48 views

Improper Restriction of Excessive Authentication Attempts in py-bcrypt

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS6.4AI score0.02835EPSS
SaveExploits1References7Affected Software1
NVD
NVD
•added 2020/01/28 3:15 p.m.•30 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.7AI score0.02835EPSS
SaveExploits1References5
osv-cve
osv-cve
•added 2020/01/28 3:15 p.m.•15 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.7AI score
SaveExploits0References7
Prion
Prion
•added 2020/01/28 3:15 p.m.•26 views

Authentication flaw

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

5CVSS7.3AI score0.02835EPSS
SaveExploits1References5Affected Software2
osv-pysec
osv-pysec
•added 2020/01/28 3:15 p.m.•34 views

PYSEC-2020-249

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS6.3AI score0.02835EPSS
SaveExploits1References6
PyPA
PyPA
•added 2020/01/28 3:15 p.m.•13 views

PYSEC-2020-249

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.3AI score0.02835EPSS
SaveExploits1References6Affected Software1
UbuntuCve
UbuntuCve
•added 2020/01/28 3:15 p.m.•35 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.1AI score0.02835EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2020/01/28 2:30 p.m.•52 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.7AI score0.02835EPSS
SaveExploits1
Mend
Mend
•added 2020/01/28 2:30 p.m.•4 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

8.7CVSS0.02835EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2020/01/28 2:30 p.m.•41 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.7AI score0.02835EPSS
SaveExploits1References5
CVE
CVE
•added 2020/01/28 2:30 p.m.•124 views

CVE-2013-1895

The CVE-2013-1895 entry concerns the py-bcrypt package for Python, specifically before version 0.3. The issue is a race/concurrency flaw: the module does not properly handle concurrent memory access, which allows attackers to bypass authentication by issuing multiple authentication attempts that ...

7.5CVSS7.5AI score0.02835EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2020/01/28 12:00 a.m.•4 views

PT-2020-7373

Name of the Vulnerable Software and Affected Versions: py-bcrypt versions prior to 0.3 Description: The issue arises from improper handling of concurrent memory access in the py-bcrypt module, allowing attackers to bypass authentication. This is achieved through multiple authentication requests...

8.7CVSS0.02835EPSS
SaveExploits1References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/28 12:00 a.m.•7 views

CVE-2013-1895: Improper Restriction of Excessive Authentication Attempts

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.2AI score0.02835EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/04/05 12:00 a.m.•33 views

Fedora Update for py-bcrypt FEDORA-2013-4424

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.02835EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/04/05 12:00 a.m.•45 views

Fedora Update for py-bcrypt FEDORA-2013-4447

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.02835EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/04/05 12:00 a.m.•38 views

Fedora Update for py-bcrypt FEDORA-2013-4447

Check for the Version of py-bcrypt OpenVAS Vulnerability Test Fedora Update for py-bcrypt FEDORA-2013-4447 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

7.5AI score0.02835EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2013/04/05 12:00 a.m.•25 views

Fedora 18 : py-bcrypt-0.3-1.fc18 (2013-4447)

Fix for CVE-2013-1895: py-bcrypt 0.3 contains a concurrency bug that could result in auth bypass. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

7.5CVSS7.2AI score0.02835EPSS
SaveExploits1References4
Rows per page
Query Builder