303 matches found
USN-4022-1: Gunicorn vulnerability
It was discovered that gunicorn improperly handled certain input. An attacker could potentially use this issue execute a cross-site scripting XSS attack...
GHSA-926Q-WXR6-3CRQ Moderate severity vulnerability that affects roundup
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
PYSEC-2019-201
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
Syhunt Community Hybrid Scanner v6.2
Syhunt Community is a hybrid static and dynamic web application security scanner. Syhunt is able to scan any kind of application source code for potential security vulnerabilities, pinpointing the exact lines of the code that need to be patched. Or you can simply enter a start URL and get detaile...
USN-3666-1: Oslo middleware vulnerability
Divya K Konoor discovered Oslo middleware was vulnerable to an information disclosure. A local attacker could exploit this flaw to obtain sensitive information from OpenStack component error logs...
Gunicorn HTTP Response Splitting Vulnerability Vulnerability
gunicorn is a UNIX-based Python WSGI HTTP server software. A security vulnerability exists in the 'processheaders' function of the nicorn/http/wsgi.py file in gunicorn version 19.4.5. An attacker can exploit this vulnerability to cause the server to return arbitrary HTTP packet headers...
Debian DSA-4186-1 : gunicorn - security update
It was discovered that gunicorn, an event-based HTTP/WSGI server was susceptible to HTTP Response splitting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4186. The text itself is copyright C Software in th...
Debian: Security Advisory (DSA-4186-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 26 Update: python-werkzeug-0.12.2-1.fc26
Werkzeug =3D=3D=3D=3D=3D=3D=3D=3D Werkzeug started as simple collection of various utilities for WSGI applications and has become one of the most advanced WSGI utility modules. It includes a powerful debugger, full featured request and response objects, HTTP utilities to handle entity tags, cache...
[SECURITY] Fedora 27 Update: python-werkzeug-0.12.2-1.fc27
Werkzeug =3D=3D=3D=3D=3D=3D=3D=3D Werkzeug started as simple collection of various utilities for WSGI applications and has become one of the most advanced WSGI utility modules. It includes a powerful debugger, full featured request and response objects, HTTP utilities to handle entity tags, cache...
Ladon Framework for Python 0.9.40 - XML External Entity Expansion
Advisory: XML External Entity Expansion in Ladon Webservice Attackers who can send SOAP messages to a Ladon webservice via the HTTP interface of the Ladon webservice can exploit an XML external entity expansion vulnerability and read local files, forge server side requests or overload the service...
Ladon Framework For Python 0.9.40 XXE Injection
Advisory: XML External Entity Expansion in Ladon Webservice Attackers who can send SOAP messages to a Ladon webservice via the HTTP interface of the Ladon webservice can exploit an XML external entity expansion vulnerability and read local files, forge server side requests or overload the service...
Moderate: Red Hat Security Advisory: python-defusedxml and python-pysaml2 security update
An update for python-defusedxml and python-pysaml2 is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Moderate: Red Hat Security Advisory: python-oslo-middleware security update
An update for python-oslo-middleware is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
mod_wsgi: Privilege escalation
Background modwsgi is an Apache2 module for running Python WSGI applications. Description modwsgi, when creating a daemon process group, does not properly handle dropping group privileges. Impact Context-dependent attackers could escalate privileges due to the improper handling of group privilege...
Debian DSA-3743-1 : python-bottle - security update
It was discovered that bottle, a WSGI-framework for the Python programming language, did not properly filter '\r\n' sequences when handling redirections. This allowed an attacker to perform CRLF attacks such as HTTP header injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SECURITY] [DSA 3743-1] python-bottle security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3743-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 20, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3743-1] python-bottle security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3743-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 20, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3743-1 (python-bottle - security update)
It was discovered that bottle, a WSGI-framework for the Python programming language, did not properly filter OpenVAS Vulnerability Test $Id: deb3743.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3743-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks...