Поиск уязвимостей
Количество 39
Количество 39
CVE-2014-9365
The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2014-9365
The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) ...
CVE-2016-5699
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
CVE-2016-5699
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
CVE-2016-5699
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
CVE-2016-5699
CRLF injection vulnerability in the HTTPConnection.putheader function ...
GHSA-fj2p-9cqv-m944
The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
ELSA-2017-1868
ELSA-2017-1868: python security and bug fix update (MODERATE)
GHSA-mfrc-633m-gcwg
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
openSUSE-SU-2016:1885-1
Security update for python
SUSE-SU-2016:2270-1
Security update for python
ELSA-2016-1626
ELSA-2016-1626: python security update (MODERATE)
SUSE-SU-2016:2859-1
Security update for python3
SUSE-SU-2016:2653-1
Security update for python3
SUSE-SU-2016:2106-1
Security update for python
openSUSE-SU-2016:2120-1
Security update for python3
SUSE-SU-2019:0223-1
Security update for python
openSUSE-SU-2020:0086-1
Security update for python3
SUSE-SU-2020:0114-1
Security update for python3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-9365 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 5.8 | 3% Низкий | почти 12 лет назад |
| CVE-2014-9365 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) ... | CVSS2: 5.8 | 3% Низкий | почти 12 лет назад |
 | CVE-2016-5699 CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. | CVSS3: 6.1 | 10% Низкий | около 10 лет назад |
 | CVE-2016-5699 CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. | CVSS3: 5.3 | 10% Низкий | почти 12 лет назад |
| CVE-2016-5699 CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. | CVSS3: 6.1 | 10% Низкий | около 10 лет назад |
| CVE-2016-5699 CRLF injection vulnerability in the HTTPConnection.putheader function ... | CVSS3: 6.1 | 10% Низкий | около 10 лет назад |
| GHSA-fj2p-9cqv-m944 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | 3% Низкий | больше 4 лет назад | |
| ELSA-2017-1868 ELSA-2017-1868: python security and bug fix update (MODERATE) | 3% Низкий | больше 9 лет назад | |
| GHSA-mfrc-633m-gcwg CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. | CVSS3: 6.1 | 10% Низкий | больше 4 лет назад |
 | openSUSE-SU-2016:1885-1 Security update for python | больше 10 лет назад | ||
| SUSE-SU-2016:2270-1 Security update for python | около 10 лет назад | ||
| ELSA-2016-1626 ELSA-2016-1626: python security update (MODERATE) | около 10 лет назад | ||
| SUSE-SU-2016:2859-1 Security update for python3 | почти 10 лет назад | ||
| SUSE-SU-2016:2653-1 Security update for python3 | около 10 лет назад | ||
| SUSE-SU-2016:2106-1 Security update for python | около 10 лет назад | ||
| openSUSE-SU-2016:2120-1 Security update for python3 | около 10 лет назад | ||
| SUSE-SU-2019:0223-1 Security update for python | почти 8 лет назад | ||
| openSUSE-SU-2020:0086-1 Security update for python3 | почти 7 лет назад | ||
| SUSE-SU-2020:0114-1 Security update for python3 | почти 7 лет назад |
Уязвимостей на страницу