Lucene search
+L

157 matches found

OpenVAS
OpenVAS
added 2023/01/27 12:0 a.m.19 views

Ubuntu: Security Advisory (USN-5386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.01905EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2022/04/21 1:20 p.m.75 views

USN-5386-1: AIOHTTP vulnerability

Jelmer Vernooij and Beast Glatisant discovered that AIOHTTP incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue to perform phishing attacks...

6.1CVSS7.1AI score0.01905EPSS
Exploits0
OSV
OSV
added 2022/04/21 1:20 p.m.16 views

USN-5386-1 python-aiohttp vulnerability

Jelmer Vernooij and Beast Glatisant discovered that AIOHTTP incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue to perform phishing attacks...

6.1CVSS6.9AI score0.01905EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.20 views

Mageia: Security Advisory (MGASA-2021-0161)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.01905EPSS
Exploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/01 6:21 a.m.29 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Python aiohttp

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Python aiohttp. Vulnerability Details CVEID: CVE-2021-21330 DESCRIPTION: AIOHTTP could allow a remote attacker to conduct phishing attacks, caused by a bug in the aiohttp.webmiddlewares.normalizepathmiddlewar...

6.1CVSS1.1AI score0.01905EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2021:1313-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.01905EPSS
Exploits0References2
OSV
OSV
added 2021/04/26 7:12 a.m.5 views

SUSE-SU-2021:1313-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2021-21330: Fixed the way pure-Python HTTP parser interprets // bsc1184745...

6.1CVSS6.6AI score0.01905EPSS
Exploits0References3
OSV
OSV
added 2021/03/30 8:8 p.m.14 views

MGASA-2021-0161 Updated python-aiohttp package fixes security vulnerability

Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website CVE-2021-21330...

6.1CVSS6.4AI score0.01905EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/03/08 12:0 a.m.26 views

Fedora: Security Advisory for python-aiohttp (FEDORA-2021-673b10ed77)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.4AI score0.01905EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/08 12:0 a.m.36 views

Fedora 33 : python-aiohttp (2021-673b10ed77)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-673b10ed77 advisory. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect...

6.1CVSS7AI score0.01905EPSS
Exploits0References2
Fedora
Fedora
added 2021/03/07 1:53 p.m.55 views

[SECURITY] Fedora 33 Update: python-aiohttp-3.7.4-1.fc33

Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webserve rs with middlewares and pluggable routing...

6.1CVSS1.5AI score0.01905EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/03/02 5:3 p.m.31 views

CVE-2021-21330

An open redirect flaw was found in python-aiohttp. This flaw allows a remote, unauthenticated attacker to trick users into visiting a malicious webpage, disguised as a legitimate webpage and affects applications using the normalizepathmiddleware functionality. The highest threat from this...

8.2CVSS4.7AI score0.01905EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/03/01 12:0 a.m.23 views

Debian DSA-4864-1 : python-aiohttp - security update

Beast Glatisant and Jelmer Vernooij reported that python-aiohttp, a async HTTP client/server framework, is prone to an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. C Tenable Network Security, Inc. The...

6.1CVSS7AI score0.01905EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/02/28 12:0 a.m.25 views

Debian: Security Advisory (DSA-4864-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.01905EPSS
Exploits0References4
Debian
Debian
added 2021/02/27 8:32 a.m.181 views

[SECURITY] [DSA 4864-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4864-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2021 https://www.debian.org/security/faq -...

6.1CVSS5.3AI score0.01905EPSS
Exploits0
Debian
Debian
added 2021/02/27 8:32 a.m.99 views

[SECURITY] [DSA 4864-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4864-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2021 https://www.debian.org/security/faq -...

5.8CVSS1.2AI score0.01905EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/11/16 12:0 a.m.22 views

aiohttp Detection (HTTP)

HTTP based detection of aiohttp. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112839";...

7.4AI score
Exploits0References1
Rows per page
Query Builder