Lucene search
K

10 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/10 12:0 a.m.5 views

EulerOS 2.0 SP13 : pyOpenSSL (EulerOS-SA-2026-2351)

According to the versions of the pyOpenSSL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback t...

6.3CVSS5.5AI score0.00241EPSS
Exploits0References2
OSV
OSV
added 2026/03/27 2:3 p.m.2 views

OESA-2026-1733 pyOpenSSL security update

pyOpenSSL is a rather thin wrapper around a subset of the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library. Security Fixes: A security vulnerability exists in the PyOpenSSL library's...

6.3CVSS5.9AI score0.00241EPSS
Exploits0References2
OSV
OSV
added 2026/03/27 2:3 p.m.2 views

OESA-2026-1732 pyOpenSSL security update

pyOpenSSL is a rather thin wrapper around a subset of the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library. Security Fixes: A security vulnerability exists in the PyOpenSSL library's...

6.3CVSS5.9AI score0.00241EPSS
Exploits0References2
OSV
OSV
added 2026/03/27 2:3 p.m.2 views

OESA-2026-1729 pyOpenSSL security update

pyOpenSSL is a rather thin wrapper around a subset of the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library. Security Fixes: A security vulnerability exists in the PyOpenSSL library's...

9.8CVSS5.9AI score0.005EPSS
Exploits0References3
Veracode
Veracode
added 2026/03/21 5:27 a.m.5 views

TLS Connection Bypass

pyOpenSSL is vulnerable to TLS connection bypass. The vulnerability is due to an unhandled exception in a user-provided settlsextservernamecallback, where the exception is not caught and results in the connection being accepted, allowing attackers to bypass security-sensitive checks...

6.3CVSS5.9AI score0.00241EPSS
Exploits0References3Affected Software2
Microsoft CVE
Microsoft CVE
added 2026/03/19 8:4 a.m.2 views

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

...

6.3CVSS5.8AI score0.00241EPSS
Exploits0
OSV
OSV
added 2026/03/18 12:16 a.m.4 views

DEBIAN-CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

5.3CVSS5.3AI score0.00241EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/17 11:24 p.m.3 views

CVE-2026-27448 pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.8AI score0.00241EPSS
Exploits0References3
OSV
OSV
added 2026/03/17 11:24 p.m.2 views

CVE-2026-27448 pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.9AI score0.00241EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/17 11:24 p.m.6 views

CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.8AI score0.00241EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder