Lucene search
K

625 matches found

OSV
OSV
added 2021/11/15 5:45 p.m.26 views

GHSA-5XP3-JFQ3-5Q8X Improper Input Validation in pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

7.1CVSS6AI score0.0024EPSS
Exploits2References12
Github Security Blog
Github Security Blog
added 2021/11/15 5:45 p.m.198 views

Improper Input Validation in pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.3AI score0.0024EPSS
Exploits2References11Affected Software1
OpenVAS
OpenVAS
added 2021/11/12 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2021-2720)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6.2AI score0.0024EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/11/12 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2021-2695)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6.2AI score0.0024EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.24 views

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2021-2695)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...

5.7CVSS7.1AI score0.0024EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.31 views

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

5.7CVSS7.2AI score0.0024EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.66 views

RHEL 8 : python-pip (RHSA-2021:4455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4455 advisory. pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package...

5.7CVSS7.2AI score0.0024EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.65 views

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory. - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS CVE-2021-28957 - python-ipaddress: Improper input validation ...

9.8CVSS7AI score0.02048EPSS
Exploits6References8
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.28 views

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2021-2720)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...

5.7CVSS7.1AI score0.0024EPSS
Exploits2References2
OSV
OSV
added 2021/11/10 6:15 p.m.16 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS7.2AI score
Exploits0References4
NVD
NVD
added 2021/11/10 6:15 p.m.23 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS0.0024EPSS
Exploits2References4
OSV
OSV
added 2021/11/10 6:15 p.m.0 views

DEBIAN-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.0024EPSS
Exploits2References1
PyPA
PyPA
added 2021/11/10 6:15 p.m.4 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.7AI score0.0024EPSS
Exploits2References2Affected Software1
OSV
OSV
added 2021/11/10 6:15 p.m.75 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS4AI score0.0024EPSS
Exploits2References2
UbuntuCve
UbuntuCve
added 2021/11/10 6:15 p.m.51 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.0024EPSS
Exploits2References6
Prion
Prion
added 2021/11/10 6:15 p.m.28 views

Design/Logic Flaw

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

3.5CVSS7AI score0.0024EPSS
Exploits2References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/11/10 6:15 p.m.2 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS5.6AI score0.0024EPSS
Exploits2References5
OSV
OSV
added 2021/11/10 6:15 p.m.1 views

UBUNTU-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.0024EPSS
Exploits2References7
CVE
CVE
added 2021/11/10 5:55 p.m.529 views

CVE-2021-3572

The CVE-2021-3572 issue affects python-pip and stems from how it handles Unicode separators in git references, with the potential to cause a different revision to be installed in a repository. The vulnerability affects data integrity and is mitigated by upgrading to python-pip version 21.1, which...

5.7CVSS5.8AI score0.0024EPSS
Exploits2References4Affected Software1
Debian CVE
Debian CVE
added 2021/11/10 5:55 p.m.43 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.9AI score0.0024EPSS
Exploits2
Rows per page
Query Builder