Поиск уязвимостей
Количество 27
Количество 27
BDU:2020-04508
Уязвимость сервера документации XML-RPC интерпретатора языка программирования Python, позволяющая нарушителю осуществить межсайтовую сценарную атаку
ALT-PU-2020-1434
ALT-PU-2020-1434: package `python3` update to version 3.8.1-alt1
ALT-PU-2019-3103
ALT-PU-2019-3103: package `python` update to version 2.7.17-alt1
CVE-2019-16935
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
CVE-2019-16935
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
CVE-2019-16935
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
CVE-2019-16935
The documentation XML-RPC server in Python through 2.7.16, 3.x through ...
GHSA-qhmv-wcg2-h8hx
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
ELSA-2020-3911
ELSA-2020-3911: python security update (MODERATE)
openSUSE-SU-2019:2453-1
Security update for python3
openSUSE-SU-2019:2438-1
Security update for python3
SUSE-SU-2019:2802-1
Security update for python3
SUSE-SU-2019:2748-2
Security update for python
SUSE-SU-2019:2748-1
Security update for python
ELSA-2020-3888
ELSA-2020-3888: python3 security update (MODERATE)
openSUSE-SU-2019:2393-1
Security update for python
openSUSE-SU-2019:2389-1
Security update for python
SUSE-SU-2019:2743-1
Security update for python
ELSA-2020-4433
ELSA-2020-4433: python3 security and bug fix update (MODERATE)
SUSE-SU-2020:2699-1
Security update for python3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-04508 Уязвимость сервера документации XML-RPC интерпретатора языка программирования Python, позволяющая нарушителю осуществить межсайтовую сценарную атаку | CVSS3: 6.1 | 5% Низкий | около 7 лет назад |
| ALT-PU-2020-1434 ALT-PU-2020-1434: package `python3` update to version 3.8.1-alt1 | CVSS3: 7.8 | больше 6 лет назад | |
| ALT-PU-2019-3103 ALT-PU-2019-3103: package `python` update to version 2.7.17-alt1 | CVSS3: 9.8 | около 7 лет назад | |
 | CVE-2019-16935 The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server. | CVSS3: 6.1 | 5% Низкий | около 7 лет назад |
 | CVE-2019-16935 The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server. | CVSS3: 6.1 | 5% Низкий | около 7 лет назад |
 | CVE-2019-16935 The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server. | CVSS3: 6.1 | 5% Низкий | около 7 лет назад |
| CVE-2019-16935 The documentation XML-RPC server in Python through 2.7.16, 3.x through ... | CVSS3: 6.1 | 5% Низкий | около 7 лет назад |
| GHSA-qhmv-wcg2-h8hx The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server. | CVSS3: 6.1 | 5% Низкий | больше 4 лет назад |
| ELSA-2020-3911 ELSA-2020-3911: python security update (MODERATE) | 5% Низкий | около 6 лет назад | |
 | openSUSE-SU-2019:2453-1 Security update for python3 | почти 7 лет назад | ||
| openSUSE-SU-2019:2438-1 Security update for python3 | около 7 лет назад | ||
| SUSE-SU-2019:2802-1 Security update for python3 | около 7 лет назад | ||
| SUSE-SU-2019:2748-2 Security update for python | почти 7 лет назад | ||
| SUSE-SU-2019:2748-1 Security update for python | около 7 лет назад | ||
| ELSA-2020-3888 ELSA-2020-3888: python3 security update (MODERATE) | около 6 лет назад | ||
| openSUSE-SU-2019:2393-1 Security update for python | около 7 лет назад | ||
| openSUSE-SU-2019:2389-1 Security update for python | около 7 лет назад | ||
| SUSE-SU-2019:2743-1 Security update for python | около 7 лет назад | ||
| ELSA-2020-4433 ELSA-2020-4433: python3 security and bug fix update (MODERATE) | почти 6 лет назад | ||
| SUSE-SU-2020:2699-1 Security update for python3 | около 6 лет назад |
Уязвимостей на страницу