Поиск уязвимостей
Количество 39
Количество 39
ALT-PU-2015-1995
ALT-PU-2015-1995: package `python` update to version 2.7.10-alt1
ALT-PU-2016-1294
ALT-PU-2016-1294: package `python3` update to version 3.5.1-alt2
CVE-2013-1753
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVE-2013-1753
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVE-2013-1753
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVE-2013-1753
The gzip_decode function in the xmlrpc client library in Python 3.4 an ...
GHSA-rg2r-27jq-959f
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVE-2013-7440
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
CVE-2013-7440
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
CVE-2013-7440
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
CVE-2013-7440
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 a ...
SUSE-SU-2015:1344-1
Security update for python
ELSA-2015-2101
ELSA-2015-2101: python security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2020:0234-1
Security update for python
ELSA-2015-1064
ELSA-2015-1064: python27 security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2015:1651-1
Recommended update for python-setuptools
SUSE-SU-2015:1298-1
Security update for python-setuptools
GHSA-v6fx-m8cj-52v3
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
CVE-2014-9365
The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2014-9365
The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2015-1995 ALT-PU-2015-1995: package `python` update to version 2.7.10-alt1 | CVSS3: 7.5 | почти 11 лет назад | |
| ALT-PU-2016-1294 ALT-PU-2016-1294: package `python3` update to version 3.5.1-alt2 | CVSS3: 9.8 | больше 10 лет назад | |
 | CVE-2013-1753 The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
 | CVE-2013-1753 The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. | CVSS2: 4.3 | 3% Низкий | около 14 лет назад |
 | CVE-2013-1753 The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| CVE-2013-1753 The gzip_decode function in the xmlrpc client library in Python 3.4 an ... | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| GHSA-rg2r-27jq-959f The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. | 3% Низкий | больше 4 лет назад | |
| CVE-2013-7440 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate. | CVSS3: 5.9 | 2% Низкий | больше 10 лет назад |
| CVE-2013-7440 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate. | CVSS2: 4 | 2% Низкий | около 13 лет назад |
| CVE-2013-7440 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate. | CVSS3: 5.9 | 2% Низкий | больше 10 лет назад |
| CVE-2013-7440 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 a ... | CVSS3: 5.9 | 2% Низкий | больше 10 лет назад |
 | SUSE-SU-2015:1344-1 Security update for python | больше 11 лет назад | ||
| ELSA-2015-2101 ELSA-2015-2101: python security, bug fix, and enhancement update (MODERATE) | почти 11 лет назад | ||
| SUSE-SU-2020:0234-1 Security update for python | почти 7 лет назад | ||
| ELSA-2015-1064 ELSA-2015-1064: python27 security, bug fix, and enhancement update (MODERATE) | почти 11 лет назад | ||
| SUSE-SU-2015:1651-1 Recommended update for python-setuptools | 2% Низкий | больше 11 лет назад | |
| SUSE-SU-2015:1298-1 Security update for python-setuptools | 2% Низкий | больше 11 лет назад | |
| GHSA-v6fx-m8cj-52v3 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate. | CVSS3: 5.9 | 2% Низкий | больше 4 лет назад |
| CVE-2014-9365 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 5.8 | 3% Низкий | почти 12 лет назад |
| CVE-2014-9365 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS3: 4.7 | 3% Низкий | почти 12 лет назад |
Уязвимостей на страницу