Lucene search
+L

728 matches found

OSV
OSV
•added 2021/11/15 5:45 p.m.•39 views

GHSA-5XP3-JFQ3-5Q8X Improper Input Validation in pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

7.1CVSS6AI score0.01829EPSS
SaveExploits2References12
Github Security Blog
Github Security Blog
•added 2021/11/15 5:45 p.m.•220 views

Improper Input Validation in pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.3AI score0.01829EPSS
SaveExploits2References11Affected Software1
OpenVAS
OpenVAS
•added 2021/11/12 12:00 a.m.•22 views

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2021-2720)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6.2AI score0.01829EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2021/11/12 12:00 a.m.•13 views

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2021-2695)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6.2AI score0.01829EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•26 views

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2021-2695)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...

5.7CVSS7.1AI score0.01829EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•34 views

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2021-2720)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue t...

5.7CVSS7.1AI score0.01829EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•70 views

RHEL 8 : python-pip (RHSA-2021:4455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4455 advisory. pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package...

5.7CVSS7.2AI score0.01829EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•77 views

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory. - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS CVE-2021-28957 - python-ipaddress: Improper input validation ...

9.8CVSS7AI score0.11586EPSS
SaveExploits6References8
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•37 views

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

5.7CVSS7.2AI score0.01829EPSS
SaveExploits2References2
OSV
OSV
•added 2021/11/10 6:15 p.m.•29 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS7.2AI score
SaveExploits0References4
OSV
OSV
•added 2021/11/10 6:15 p.m.•8 views

DEBIAN-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References1
OSV
OSV
•added 2021/11/10 6:15 p.m.•13 views

AZL-86103 CVE-2021-3572 affecting package python-IPy 1.01-13

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/10 6:15 p.m.•41 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS0.01829EPSS
SaveExploits2References4
Prion
Prion
•added 2021/11/10 6:15 p.m.•36 views

Design/Logic Flaw

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

3.5CVSS7AI score0.01829EPSS
SaveExploits2References3Affected Software4
UbuntuCve
UbuntuCve
•added 2021/11/10 6:15 p.m.•67 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References6
OSV
OSV
•added 2021/11/10 6:15 p.m.•15 views

UBUNTU-CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References7
PyPA
PyPA
•added 2021/11/10 6:15 p.m.•19 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS6.7AI score0.01829EPSS
SaveExploits2References2Affected Software1
attackerkb
attackerkb
•added 2021/11/10 6:15 p.m.•8 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS5.6AI score0.01829EPSS
SaveExploits2References5
OSV
OSV
•added 2021/11/10 6:15 p.m.•100 views

PYSEC-2021-437

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

5.7CVSS4AI score0.01829EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/11/10 5:55 p.m.•65 views

CVE-2021-3572

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1...

6.1AI score0.01829EPSS
SaveExploits2References4
Rows per page
Query Builder