CVE-2014-5277

CVE-2014-5277 affects Docker before 1.3.1 and docker-py before 0.5.3, where fallbacks to HTTP occur if HTTPS to the registry fails. This enables man-in-the-middle downgrade attacks that can lead to exposure of authentication and image data when an attacker sits between the client and registry. Co...

CVE-2014-5277

Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...

CVE-2014-5277

Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...

py-foolscap -- local file inclusion

Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who has the ability to write files to a location where the flappserver process could read them, would allow that attacker to obtain control of the...

Py-Membres 3.1 Index.PHP Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5849/info A vulnerability has been reported for Py-Membres 3.1 that allows remote attackers to obtain administrative privileges on vulnerable installations. Reportedly, Py-Membres does not fully check some URI parameters...

PY Software Active Webcam 4.3 Webserver Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9261/info A vulnerability has been reported to be present in the software that may allow a remote attacker to execute HTML or script code in a user's browser. It has been reported that the problem arises when the software...

Py-Membres 4.0 - Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7301/info A vulnerability has been reported for Py-Membres 4.0 that allows remote attackers to modify the logic of SQL queries. It has been reported that an input validation error exists in the login.php file included wit...

Py-Membres 4.x Pass_done.PHP Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8500/info A vulnerability has been reported for Py-Membres that allows remote attackers to modify the logic of SQL queries. It has been reported that an input validation error exists in the passdone.php file included with...

Py-Membres 4.x Secure.PHP Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8499/info A vulnerability has been reported for Py-Membres that allows remote attackers to obtain administrative privileges on vulnerable installations. Reportedly, Py-Membres does not fully check some URI parameters. Thu...

CVE-2014-2096

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...

FreeBSD : py-graphite-web -- Multiple vulnerabilities (e1f99d59-81aa-4662-bf62-c1076f5016c8)

Graphite developers report : This release contains several security fixes for cross-site scripting XSS as well as a fix for a remote-execution exploit in graphite-web CVE-2013-5903. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

dfnclient (>=0.0.1 <=0.4.6), django-afip (>=1.0.2 <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0 <=1.4.1.0)

suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: OSV:PYSEC-2013-33...

Fedora Update for py-bcrypt FEDORA-2013-4424

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for py-bcrypt FEDORA-2013-4447

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for py-bcrypt FEDORA-2013-4447

Check for the Version of py-bcrypt OpenVAS Vulnerability Test Fedora Update for py-bcrypt FEDORA-2013-4447 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora 18 : py-bcrypt-0.3-1.fc18 (2013-4447)

Fix for CVE-2013-1895: py-bcrypt 0.3 contains a concurrency bug that could result in auth bypass. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 17 : py-bcrypt-0.3-1.fc17 (2013-4424)

Fix for CVE-2013-1895: py-bcrypt 0.3 contains a concurrency bug that could result in auth bypass. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Python 'py-bcrypt' 模块身份验证绕过漏洞(CVE-2013-1895)

BUGTRAQ ID: 58702 CVECAN ID: CVE-2013-1895 Py-bcrypt是OpenBSD Blowfish密码哈希算法的实现。 Python py-bcrypt 0.3之前版本没有正确执行并发内存范围操作，在实现上存在身份验证绕过漏洞，可被利用绕过安全限制，非法访问系统。 0 Python py-bcrypt Module 0.x 厂商补丁： Python ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： www.python.org...

FreeBSD Ports: py-libcloud

The remote host is missing an update to the system as announced in the referenced advisory. VID a14dee30-e3d7-11e1-a084-50e5492bd3dc OpenVAS Vulnerability Test $ Description: Auto generated from VID a14dee30-e3d7-11e1-a084-50e5492bd3dc Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: py-libcloud

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...