460 matches found
GHSA-5CPQ-8WJ7-HF2V vulnerabilities
Vulnerabilities for packages: conda, mitmproxy, py3-cassandra-medusa...
GHSA-5CPQ-8WJ7-HF2V vulnerabilities
Vulnerabilities for packages: conda, mitmproxy, py3-cassandra-medusa...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: go, kube-state-metrics, wireguard-go, dynamic-localpv-provisioner, kubeflow, k3d, kubeflow-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, gke-gcloud-auth-plugin, hey, restic, grpcurl, kubeflow-katib, terraform-provider-sendgrid...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: go, kube-state-metrics, wireguard-go, dynamic-localpv-provisioner, kubeflow, k3d, kubeflow-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, gke-gcloud-auth-plugin, hey, restic, grpcurl, kubeflow-katib, terraform-provider-sendgrid...
MAL-2023-890 Malicious code in ticket-parser2-py3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4ed8944d1857578a442a65eb150261698ec277d1abc7ec86756286f5904cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ticket-parser2-py3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4ed8944d1857578a442a65eb150261698ec277d1abc7ec86756286f5904cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41721 vulnerabilities
Vulnerabilities for packages: kyverno...
Denial Of Service (DoS)
py3-rencode is vulnerable to denial of service. The vulnerability exists due to an infinite loop in typecode decoding enabling a remote attacker to cause a memory consumption resulting in an application crash...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: kube-state-metrics, wireguard-go, dynamic-localpv-provisioner, kubeflow, k3d, kubeflow-fips, terraform-provider-sendgrid-fips, hey, dynamic-localpv-provisioner-fips, grpcurl, kubeflow-katib, terraform-provider-sendgrid...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: kube-state-metrics, wireguard-go, dynamic-localpv-provisioner, kubeflow, k3d, kubeflow-fips, terraform-provider-sendgrid-fips, hey, dynamic-localpv-provisioner-fips, grpcurl, kubeflow-katib, terraform-provider-sendgrid...
HTTP Request Smuggling
py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...
Regular Expression Denial Of Service (ReDoS)
py3-mistune is vulnerable to regular expression denial of service. An attacker is able crash the system by injecting a maliciously crafted string into ASTERISKEMPHASIS...
GHSA-R48Q-9G5R-8Q2H vulnerabilities
Vulnerabilities for packages: kubeflow-fips, kubeflow, kube-state-metrics...
dfnclient (>=0.0.1, <=0.4.6), django-afip (>=1.0.2, <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0, <=1.4.1.0)
suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: GHSA-VPQP-HX68-P2WX...
GHSA-8C26-WMH5-6G9V vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow, k3d, kubeflow-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid...
Denial Of Service (DoS)
py3-pillow:edge is vulnerable to denial of service...
Regular Expression Denial Of Service (ReDoS)
py3-pillow is vulnerable to regular expression denial of service. An attacker is able to crash the system through the getrgb function...
HawkScan - Security Tool For Reconnaissance And Information Gathering On A Website
Security Tool for Reconnaissance and Information Gathering on a website. python 2.x & 3.x This script use "WafW00f" to detect the WAF in the first step https://github.com/EnableSecurity/wafw00f This script use "Sublist3r" to scan subdomains https://github.com/aboul3la/Sublist3r This script use...
dfnclient (>=0.0.1, <=0.4.6), django-afip (>=1.0.2, <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0, <=1.4.1.0)
suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: OSV:PYSEC-2013-33...
dfnclient (>=0.0.1, <=0.4.6), django-afip (>=1.0.2, <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0, <=1.4.1.0)
suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: MEND:CVE-2013-2217...