Поиск уязвимостей
Количество 51
Количество 51
ALT-PU-2020-3395
ALT-PU-2020-3395: package `python` update to version 2.7.18-alt2
SUSE-SU-2020:3563-1
Security update for python36
openSUSE-SU-2020:2333-1
Security update for python3
openSUSE-SU-2020:2332-1
Security update for python3
SUSE-SU-2020:3930-1
Security update for python3
ALT-PU-2020-2445
ALT-PU-2020-2445: package `python3` update to version 3.8.5-alt1
CVE-2020-26116
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
CVE-2020-26116
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
CVE-2020-26116
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
CVE-2020-26116
http.client in Python 3.x before 3.5.10 3.6.x before 3.6.12 3.7.x before 3.7.9 and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
CVE-2020-26116
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x be ...
CVE-2019-20907
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVE-2019-20907
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVE-2019-20907
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVE-2019-20907
CVE-2019-20907
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craf ...
openSUSE-SU-2020:1988-1
Security update for python
openSUSE-SU-2020:1859-1
Security update for python
SUSE-SU-2021:0341-1
Security update for python-urllib3
SUSE-SU-2021:0299-1
Security update for python-urllib3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-3395 ALT-PU-2020-3395: package `python` update to version 2.7.18-alt2 | CVSS3: 7.5 | почти 6 лет назад | |
 | SUSE-SU-2020:3563-1 Security update for python36 | почти 6 лет назад | ||
| openSUSE-SU-2020:2333-1 Security update for python3 | почти 6 лет назад | ||
| openSUSE-SU-2020:2332-1 Security update for python3 | почти 6 лет назад | ||
| SUSE-SU-2020:3930-1 Security update for python3 | почти 6 лет назад | ||
| ALT-PU-2020-2445 ALT-PU-2020-2445: package `python3` update to version 3.8.5-alt1 | CVSS3: 9.8 | больше 6 лет назад | |
 | CVE-2020-26116 http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request. | CVSS3: 7.2 | 6% Низкий | около 6 лет назад |
 | CVE-2020-26116 http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request. | CVSS3: 6.5 | 6% Низкий | больше 6 лет назад |
 | CVE-2020-26116 http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request. | CVSS3: 7.2 | 6% Низкий | около 6 лет назад |
 | CVE-2020-26116 http.client in Python 3.x before 3.5.10 3.6.x before 3.6.12 3.7.x before 3.7.9 and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request. | CVSS3: 7.2 | 6% Низкий | почти 6 лет назад |
| CVE-2020-26116 http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x be ... | CVSS3: 7.2 | 6% Низкий | около 6 лет назад |
| CVE-2019-20907 In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation. | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| CVE-2019-20907 In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation. | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
| CVE-2019-20907 In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation. | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| CVSS3: 7.5 | 3% Низкий | около 2 лет назад | |
| CVE-2019-20907 In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craf ... | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| openSUSE-SU-2020:1988-1 Security update for python | 6% Низкий | почти 6 лет назад | |
| openSUSE-SU-2020:1859-1 Security update for python | 6% Низкий | около 6 лет назад | |
| SUSE-SU-2021:0341-1 Security update for python-urllib3 | 6% Низкий | почти 6 лет назад | |
| SUSE-SU-2021:0299-1 Security update for python-urllib3 | 6% Низкий | почти 6 лет назад |
Уязвимостей на страницу