Lucene search
+L

595 matches found

Tenable Nessus
Tenable Nessus
•added 2022/08/18 12:00 a.m.•23 views

Ubuntu 22.04 LTS : PyJWT regression (USN-5526-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5526-2 advisory. USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This...

5.6AI score
SaveExploits0References1
OSV
OSV
•added 2022/08/17 1:58 a.m.•7 views

USN-5526-2 pyjwt regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Aapo Oksman discovered that PyJWT incorrectly...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2022/08/17 1:58 a.m.•50 views

USN-5526-2: PyJWT regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Aapo Oksman discovered that PyJWT incorrectly...

5.6AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/08/03 7:34 p.m.•24 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in PyJWT

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of PyJWT. Vulnerability Details CVEID:CVE-2022-29217 DESCRIPTION: PyJWT could allow a remote attacker to bypass security restrictions, caused by the key confusion through non-blocklisted public key formats. By...

7.5CVSS7.5AI score0.01355EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2022/07/21 12:00 a.m.•41 views

Ubuntu: Security Advisory (USN-5526-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2022/07/20 1:09 a.m.•364 views

USN-5526-1: PyJWT vulnerability

Aapo Oksman discovered that PyJWT incorrectly handled signatures constructed from SSH public keys. A remote attacker could use this to forge a JWT signature...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/07/20 12:00 a.m.•44 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : PyJWT vulnerability (USN-5526-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5526-1 advisory. Aapo Oksman discovered that PyJWT incorrectly handled signatures constructed from SSH public keys. A remote attacker could use this to for...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/07/15 12:00 a.m.•122 views

SUSE SLES15 Security Update : python-PyJWT (SUSE-SU-2022:2403-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2403-1 advisory. - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting t...

7.5CVSS7.1AI score0.01355EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/07/15 12:00 a.m.•11 views

SUSE: Security Advisory (SUSE-SU-2022:2401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/07/15 12:00 a.m.•18 views

SUSE: Security Advisory (SUSE-SU-2022:2403-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/07/15 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2022:2402-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/07/15 12:00 a.m.•111 views

SUSE SLES12 Security Update : python-PyJWT (SUSE-SU-2022:2401-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2401-1 advisory. - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting t...

7.5CVSS7.1AI score0.01355EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/07/15 12:00 a.m.•34 views

openSUSE: Security Advisory for python-PyJWT (SUSE-SU-2022:2402-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/07/15 12:00 a.m.•110 views

SUSE SLED15 / SLES15 Security Update : python-PyJWT (SUSE-SU-2022:2402-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2402-1 advisory. - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an...

7.5CVSS7.1AI score0.01355EPSS
SaveExploits0References4
OSV
OSV
•added 2022/07/14 3:00 p.m.•10 views

SUSE-SU-2022:2403-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed key confusion through non-blocklisted public key format bsc1199756...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References3
OSV
OSV
•added 2022/07/14 2:58 p.m.•11 views

SUSE-SU-2022:2402-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed key confusion through non-blocklisted public key format bsc1199756...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References3
OSV
OSV
•added 2022/07/14 2:57 p.m.•9 views

SUSE-SU-2022:2401-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed key confusion through non-blocklisted public key format bsc1199756...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/07/01 12:00 a.m.•8 views

Mageia: Security Advisory (MGASA-2022-0244)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References4
OSV
OSV
•added 2022/06/30 9:31 p.m.•15 views

MGASA-2022-0244 Updated python-pyjwt packages fix security vulnerability

An attacker submitting the JWT token can choose the used signing algorithm CVE-2022-29217...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2022/06/08 7:00 a.m.•10 views

Key confusion through non-blocklisted public key formats in PyJWT

...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0
Rows per page
Query Builder