Lucene search
+L

108 matches found

Tenable Nessus
Tenable Nessus
•added 2022/10/08 12:00 a.m.•38 views

EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2022-2421)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7AI score0.01355EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2022/09/26 8:49 a.m.•53 views

CVE-2022-39227

A flaw was found in python-jwt, where it was subject to Authentication Bypass vulnerability by spoofing, resulting in identity spoofing, session hijacking, or authentication bypass. This flaw allows an attacker who obtains a JWT to arbitrarily forge its contents without knowing the secret key...

9.1CVSS3.7AI score0.05342EPSS
SaveExploits2References4
osv-azl
osv-azl
•added 2022/09/23 7:15 a.m.•18 views

AZL-11032 CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS7.4AI score0.05342EPSS
SaveExploits2References1
NVD
NVD
•added 2022/09/23 7:15 a.m.•30 views

CVE-2022-39227

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS0.05342EPSS
SaveExploits2References4
Prion
Prion
•added 2022/09/23 7:15 a.m.•30 views

Authentication flaw

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

6.4CVSS9.2AI score0.05342EPSS
SaveExploits2References3Affected Software1
osv-cve
osv-cve
•added 2022/09/23 6:55 a.m.•49 views

CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS9.2AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2022/09/23 6:55 a.m.•67 views

CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS9.6AI score0.05342EPSS
SaveExploits2References4
Mend
Mend
•added 2022/09/23 6:55 a.m.•4 views

CVE-2022-39227

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.3CVSS0.05342EPSS
SaveExploits2References7
Vulnrichment
Vulnrichment
•added 2022/09/23 6:55 a.m.•23 views

CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS6.9AI score0.05342EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2022/09/23 12:00 a.m.•20 views

python-jwt 安全漏洞

python-jwt is a Python module for generating and verifying JSON web tokens from the individual developer David Halls. A security vulnerability exists in python-jwt versions prior to 3.3.4 that stems from being affected by spoofing to bypass authentication, which can lead to identity spoofing,...

9.1CVSS8.2AI score0.05342EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•2 views

CVE-2022-39227: Authentication Bypass by Spoofing

python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowi...

9.1CVSS8.1AI score0.05342EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2022/09/14 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for python-jwt (EulerOS-SA-2022-2302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/09/14 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for python-jwt (EulerOS-SA-2022-2331)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/09/14 12:00 a.m.•59 views

EulerOS 2.0 SP9 : python-jwt (EulerOS-SA-2022-2302)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7AI score0.01355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/09/14 12:00 a.m.•47 views

EulerOS 2.0 SP9 : python-jwt (EulerOS-SA-2022-2331)

According to the versions of the python-jwt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the...

7.5CVSS7AI score0.01355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/01 12:00 a.m.•12 views

PT-2022-24825 · Pypi · Python-Jwt

Name of the Vulnerable Software and Affected Versions: python-jwt versions prior to 3.3.4 Description: The issue allows an attacker who obtains a JSON Web Token JWT to arbitrarily forge its contents without knowing the secret key. This may enable the attacker to spoof other users' identities,...

9.3CVSS7.4AI score0.05342EPSS
SaveExploits2References15
CBLMariner
CBLMariner
•added 2022/07/14 8:59 p.m.•37 views

CVE-2022-29217 affecting package python-jwt 1.7.1-9

CVE-2022-29217 affecting package python-jwt 1.7.1-9. An upgraded version of the package is available that resolves this issue...

7.5CVSS7.3AI score0.01355EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2022/06/26 3:29 a.m.•41 views

CVE-2022-29217 affecting package python-jwt for versions less than 2.4.0-1

CVE-2022-29217 affecting package python-jwt for versions less than 2.4.0-1. An upgraded version of the package is available that resolves this issue...

7.5CVSS7.2AI score0.01355EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/06/01 12:00 a.m.•17 views

Fedora: Security Advisory for python-jwt (FEDORA-2022-4ae9110f51)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/05/28 12:00 a.m.•32 views

Fedora: Security Advisory for python-jwt (FEDORA-2022-3cf456dc20)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.4AI score0.01355EPSS
SaveExploits0References2
Rows per page
Query Builder