Поиск уязвимостей
Количество 22
Количество 22
CVE-2026-8328
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.
CVE-2026-8328
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.
CVE-2026-8328
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.
CVE-2026-8328
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
CVE-2026-8328
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
ROS-20261103-80-0160
Уязвимость python3.11
ROS-20261103-80-0159
Уязвимость python3.8
ROS-20261103-73-0162
Уязвимость python3.11
ROS-20261103-73-0161
Уязвимость python3
GHSA-j989-fggp-qgp5
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.
SUSE-SU-2026:3245-1
Security update for python3
openSUSE-SU-2026:21595-1
Security update for python313
SUSE-SU-2026:3569-1
Security update for python312
SUSE-SU-2026:3560-1
Security update for python311
SUSE-SU-2026:3548-1
Security update for python311
SUSE-SU-2026:3530-1
Security update for python310
SUSE-SU-2026:3862-1
Security update for python
SUSE-SU-2026:3635-1
Security update for python
SUSE-SU-2026:3649-1
Security update for python313
SUSE-SU-2026:3855-1
Security update for python36
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-8328 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189. | 0% Низкий | 6 месяцев назад | |
 | CVE-2026-8328 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189. | CVSS3: 5.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-8328 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189. | 0% Низкий | 6 месяцев назад | |
 | CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address | 0% Низкий | 6 месяцев назад | |
| CVE-2026-8328 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... | 0% Низкий | 6 месяцев назад | |
 | ROS-20261103-80-0160 Уязвимость python3.11 | 0% Низкий | 6 дней назад | |
| ROS-20261103-80-0159 Уязвимость python3.8 | 0% Низкий | 6 дней назад | |
| ROS-20261103-73-0162 Уязвимость python3.11 | 0% Низкий | 6 дней назад | |
| ROS-20261103-73-0161 Уязвимость python3 | 0% Низкий | 6 дней назад | |
| GHSA-j989-fggp-qgp5 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189. | 0% Низкий | 6 месяцев назад | |
 | SUSE-SU-2026:3245-1 Security update for python3 | 4 месяца назад | ||
| openSUSE-SU-2026:21595-1 Security update for python313 | 3 месяца назад | ||
| SUSE-SU-2026:3569-1 Security update for python312 | 3 месяца назад | ||
| SUSE-SU-2026:3560-1 Security update for python311 | 3 месяца назад | ||
| SUSE-SU-2026:3548-1 Security update for python311 | 3 месяца назад | ||
| SUSE-SU-2026:3530-1 Security update for python310 | 3 месяца назад | ||
| SUSE-SU-2026:3862-1 Security update for python | 2 месяца назад | ||
| SUSE-SU-2026:3635-1 Security update for python | 3 месяца назад | ||
| SUSE-SU-2026:3649-1 Security update for python313 | 3 месяца назад | ||
| SUSE-SU-2026:3855-1 Security update for python36 | 2 месяца назад |
Уязвимостей на страницу