Lucene search
+L

1098 matches found

OSV
OSV
added 2026/08/24 11:28 a.m.13 views

ROOT-APP-PYPI-CVE-2023-28370 CVE-2023-28370 in tornado - Patched by Root

Root has patched CVE-2023-28370 in the tornado package for Root:PyPI. Multiple fixed versions available...

6.1CVSS5.8AI score0.01142EPSS
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.9 views

ROOT-APP-PYPI-CVE-2026-35536 CVE-2026-35536 in tornado - Patched by Root

Root has patched CVE-2026-35536 in the tornado package for Root:PyPI. Multiple fixed versions available...

7.2CVSS5AI score0.00237EPSS
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.8 views

ROOT-APP-PYPI-CVE-2025-47287 CVE-2025-47287 in tornado - Patched by Root

Root has patched CVE-2025-47287 in the tornado package for Root:PyPI. Multiple fixed versions available...

7.5CVSS7.3AI score0.00741EPSS
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.12 views

ROOT-APP-PYPI-GHSA-753J-MPMX-QQ6G GHSA-753j-mpmx-qq6g in tornado - Patched by Root

Root has patched GHSA-753j-mpmx-qq6g in the tornado package for Root:PyPI. Multiple fixed versions available...

5.3CVSS5.9AI score
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.13 views

ROOT-APP-PYPI-GHSA-78CV-MQJ4-43F7 GHSA-78cv-mqj4-43f7 in tornado - Patched by Root

Root has patched GHSA-78cv-mqj4-43f7 in the tornado package for Root:PyPI. Multiple fixed versions available...

5.4CVSS5.9AI score
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.14 views

ROOT-APP-PYPI-CVE-2026-49853 CVE-2026-49853 in tornado - Patched by Root

Root has patched CVE-2026-49853 in the tornado package for Root:PyPI. Multiple fixed versions available...

7.7CVSS5.2AI score0.00365EPSS
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.14 views

ROOT-APP-PYPI-CVE-2026-49855 CVE-2026-49855 in tornado - Patched by Root

Root has patched CVE-2026-49855 in the tornado package for Root:PyPI. Multiple fixed versions available...

7.5CVSS5.3AI score0.00572EPSS
SaveExploits0
OSV
OSV
added 2026/08/24 11:28 a.m.11 views

ROOT-APP-PYPI-GHSA-W235-7P84-XX57 GHSA-w235-7p84-xx57 in tornado - Patched by Root

Root has patched GHSA-w235-7p84-xx57 in the tornado package for Root:PyPI. Multiple fixed versions available...

6.5CVSS5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/21 7:17 p.m.6 views

CVE-2026-54134

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

7CVSS0.00212EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/21 6:28 p.m.22 views

CVE-2026-54134

OctoPrint (web interface for 3D printers) versions prior to 1.11.8 and 2.0.0rc3 are vulnerable to file exfiltration via parser differentials between its custom Tornado upload handler and Flask/Werkzeug. An attacker with FILE_UPLOAD permission can inject reserved internal form fields through query...

7CVSS5.6AI score0.00212EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/21 6:28 p.m.8 views

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

7CVSS5.8AI score
SaveExploits0References7
NVD
NVD
added 2026/08/04 3:16 p.m.12 views

CVE-2026-67199

Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large...

7.1CVSS0.00297EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/04 2:52 p.m.5 views

CLSA-2026-1776386115 TuxCare security update for tornado (6 CVEs)

TuxCare rebuilt tornado to address 6 CVEs. Fixed in 6.1.0.post2+tuxcare...

8.7CVSS5.2AI score0.00375EPSS
SaveExploits0
OSV
OSV
added 2026/08/04 2:52 p.m.5 views

CLSA-2026-1774830272 TuxCare security update for tornado (1 CVE)

TuxCare rebuilt tornado to address 1 CVE. Fixed in 5.1.1.post1+tuxcare...

7.5CVSS7.3AI score0.01051EPSS
SaveExploits0
OSV
OSV
added 2026/08/04 2:04 p.m.11 views

CVE-2026-67199 Perspective 5.0.0 DoS via Loop Expression Evaluation

Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large...

7.1CVSS5.6AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:00 a.m.12 views

Amazon Linux 2023 : python3.13-tornado (ALAS2023-2026-2015)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2015 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving...

7.7CVSS5.7AI score0.00572EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:00 a.m.12 views

Amazon Linux 2 : python3-tornado, --advisory ALAS2-2026-3846 (ALAS-2026-3846)

The version of python3-tornado installed on the remote host is prior to 5.0.2-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3846 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...

7.7CVSS5.7AI score0.00572EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:00 a.m.12 views

Amazon Linux 2 : python-tornado, --advisory ALAS2-2026-3847 (ALAS-2026-3847)

The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3847 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...

7.7CVSS5.7AI score0.00572EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:00 a.m.10 views

Amazon Linux 2023 : python3-tornado (ALAS2023-2026-2016)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2016 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving...

7.7CVSS5.7AI score0.00572EPSS
SaveExploits0References8
Photon
Photon
added 2026/08/04 12:00 a.m.25 views

Important Photon OS Security Update - PHSA-2026-5.0-92-0939

Updates of 'python3-tornado' packages of Photon OS have been released...

7.7CVSS7.2AI score0.00572EPSS
SaveExploits0
Rows per page
Query Builder