Поиск уязвимостей
Количество 14
Количество 14
ALT-PU-2018-3704
ALT-PU-2018-3704: package `python-module-flask` update to version 1.0.2-alt1
CVE-2019-1010083
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.
CVE-2019-1010083
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.
CVE-2019-1010083
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.
CVE-2019-1010083
The Pallets Project Flask before 1.0 is affected by: unexpected memory ...
CVE-2018-1000656
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.
CVE-2018-1000656
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.
CVE-2018-1000656
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.
CVE-2018-1000656
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Imp ...
SUSE-SU-2023:1928-1
Security update for python-Flask
GHSA-5wv5-4vpf-pj6m
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
openSUSE-SU-2019:1112-1
Security update for python-Flask
SUSE-SU-2019:0657-1
Security update for python-Flask
GHSA-562c-5r94-xh97
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-3704 ALT-PU-2018-3704: package `python-module-flask` update to version 1.0.2-alt1 | CVSS3: 7.5 | почти 8 лет назад | |
 | CVE-2019-1010083 The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656. | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-1010083 The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
 | CVE-2019-1010083 The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656. | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| CVE-2019-1010083 The Pallets Project Flask before 1.0 is affected by: unexpected memory ... | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| CVE-2018-1000656 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083. | CVSS3: 7.5 | 4% Низкий | около 8 лет назад |
| CVE-2018-1000656 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083. | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
| CVE-2018-1000656 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083. | CVSS3: 7.5 | 4% Низкий | около 8 лет назад |
| CVE-2018-1000656 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Imp ... | CVSS3: 7.5 | 4% Низкий | около 8 лет назад |
 | SUSE-SU-2023:1928-1 Security update for python-Flask | 2% Низкий | больше 3 лет назад | |
| GHSA-5wv5-4vpf-pj6m Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| openSUSE-SU-2019:1112-1 Security update for python-Flask | 4% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0657-1 Security update for python-Flask | 4% Низкий | больше 7 лет назад | |
| GHSA-562c-5r94-xh97 Flask is vulnerable to Denial of Service via incorrect encoding of JSON data | CVSS3: 7.5 | 4% Низкий | около 8 лет назад |
Уязвимостей на страницу