Поиск уязвимостей
Количество 31
Количество 31
CVE-2016-5699
CRLF injection vulnerability in the HTTPConnection.putheader function ...
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before ...
ALT-PU-2017-2598
ALT-PU-2017-2598: package `python` update to version 2.7.14-alt1
GHSA-mfrc-633m-gcwg
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
GHSA-6m57-q338-h677
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
ALT-PU-2017-2501
ALT-PU-2017-2501: package `python` update to version 2.7.11-alt6
ALT-PU-2015-1995
ALT-PU-2015-1995: package `python` update to version 2.7.10-alt1
ALT-PU-2016-1294
ALT-PU-2016-1294: package `python3` update to version 3.5.1-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2016-5699 CRLF injection vulnerability in the HTTPConnection.putheader function ... | CVSS3: 6.1 | 10% Низкий | около 10 лет назад |
 | CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 6.5 | 15% Средний | около 10 лет назад |
 | CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 4.8 | 15% Средний | больше 10 лет назад |
 | CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 6.5 | 15% Средний | около 10 лет назад |
| CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before ... | CVSS3: 6.5 | 15% Средний | около 10 лет назад |
| ALT-PU-2017-2598 ALT-PU-2017-2598: package `python` update to version 2.7.14-alt1 | CVSS3: 7.5 | около 9 лет назад | |
| GHSA-mfrc-633m-gcwg CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. | CVSS3: 6.1 | 10% Низкий | больше 4 лет назад |
| GHSA-6m57-q338-h677 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 6.5 | 15% Средний | больше 4 лет назад |
| ALT-PU-2017-2501 ALT-PU-2017-2501: package `python` update to version 2.7.11-alt6 | CVSS3: 9.8 | около 9 лет назад | |
| ALT-PU-2015-1995 ALT-PU-2015-1995: package `python` update to version 2.7.10-alt1 | CVSS3: 7.5 | почти 11 лет назад | |
| ALT-PU-2016-1294 ALT-PU-2016-1294: package `python3` update to version 3.5.1-alt2 | CVSS3: 9.8 | больше 10 лет назад |
Уязвимостей на страницу