Lucene search
K

530 matches found

CNNVD
CNNVD
added 2023/01/26 12:0 a.m.1 views

pyload 跨站脚本漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A cross-site scripting vulnerability exists in versions prior to pyload/pyload 0.5.0b3.dev42. An attacker could exploit this vulnerabilit...

9.6CVSS7.1AI score0.00822EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/01/26 12:0 a.m.3 views

PT-2023-16320 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyload versions prior to 0.5.0b3.dev44 Description: The issue concerns improper certificate validation. Recommendations: For versions prior to 0.5.0b3.dev44, update to version 0.5.0b3.dev44 or later to resolve the issue...

7.4CVSS7.3AI score0.00526EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/01/26 12:0 a.m.3 views

pyload 信任管理问题漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the web. A trust management issue vulnerability exists in versions prior to pyload 0.5.0b3.dev44, which stems from incorrect validation of...

7.4CVSS7.2AI score0.00526EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/01/26 12:0 a.m.4 views

PT-2023-16300 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyload versions prior to 0.5.0b3.dev42 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and executed by other...

9.6CVSS6.6AI score0.00822EPSS
Exploits1References6
Cvelist
Cvelist
added 2023/01/26 12:0 a.m.19 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7.7AI score0.00526EPSS
Exploits1References2
OSV
OSV
added 2023/01/26 12:0 a.m.20 views

CVE-2023-0488 Cross-site Scripting (XSS) - Stored in pyload/pyload

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

9.6CVSS7.9AI score0.00822EPSS
Exploits1References4
OSV
OSV
added 2023/01/26 12:0 a.m.32 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7.5AI score0.00526EPSS
Exploits1References4
OSV
OSV
added 2023/01/23 12:30 a.m.17 views

GHSA-6JMX-PV77-WM5W Excessive Attack Surface in pyload-ng

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS6.6AI score0.0072EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/01/23 12:30 a.m.34 views

Excessive Attack Surface in pyload-ng

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS9AI score0.0072EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2023/01/22 10:15 p.m.37 views

CVE-2023-0435

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

9.8CVSS5.6AI score0.0072EPSS
Exploits1References2
Prion
Prion
added 2023/01/22 10:15 p.m.14 views

Code injection

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

2.1CVSS9.5AI score0.0072EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/01/22 3:30 a.m.11 views

GHSA-X9VC-5Q77-M7X4 Improper Input Validation in pyload-ng

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS6.3AI score0.00816EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/01/22 3:30 a.m.26 views

Improper Input Validation in pyload-ng

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

7.5CVSS7.3AI score0.00816EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2023/01/22 1:15 a.m.30 views

CVE-2023-0434

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

7.5CVSS6.1AI score0.00816EPSS
Exploits1References2
Prion
Prion
added 2023/01/22 1:15 a.m.15 views

Input validation

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

2.7CVSS7.6AI score0.00816EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/22 12:0 a.m.5 views

CVE-2023-0435 Excessive Attack Surface in pyload/pyload

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

4CVSS7.1AI score0.0072EPSS
Exploits1References2
CVE
CVE
added 2023/01/22 12:0 a.m.72 views

CVE-2023-0435

CVE-2023-0435 affects pyload/pyload (GitHub repo) prior to version 0.5.0b3.dev41. The underlying issue is an Excessive Attack Surface, leading to a high/critical risk (NVD score 9.8). Affected component is the pyload/pyload codebase; root cause described as too many attack surfaces. Remediation: ...

9.8CVSS6.7AI score0.0072EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/01/22 12:0 a.m.52 views

CVE-2023-0434

CVE-2023-0434 affects the Python-based download manager project pyload/pyload . The issue is described as an improper input validation vulnerability in versions prior to 0.5.0b3.dev40 . Affected component is the core input handling of pyload/pyload, with the underlying root cause being insufficie...

7.5CVSS6.4AI score0.00816EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/01/22 12:0 a.m.4 views

pyload 安全漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A security vulnerability exists in versions prior to pyload/pyload 0.5.0b3.dev41, which stems from the presence of too many attack surfac...

9.8CVSS5.6AI score0.0072EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/01/22 12:0 a.m.4 views

pyload 输入验证错误漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the web. An input validation error vulnerability exists in pyload versions prior to 0.5.0b3.dev40, which stems from improper input validation...

7.5CVSS6AI score0.00816EPSS
Exploits1References3
Rows per page
Query Builder