Поиск уязвимостей
Количество 39
Количество 39
ALT-PU-2021-1772
ALT-PU-2021-1772: package `python3-module-pip` update to version 21.1.1-alt1
CVE-2021-28363
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.
CVE-2021-28363
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.
CVE-2021-28363
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.
CVE-2021-28363
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.
CVE-2021-28363
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certific ...
CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
CVE-2021-3572
CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separator ...
GHSA-5phf-pp7p-vc2r
Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection
BDU:2025-04191
Уязвимость HTTP библиотеки Urllib3 языка программирования Python, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность
openSUSE-SU-2022:0942-1
Security update for python3
openSUSE-SU-2022:0064-1
Security update for python39-pip
openSUSE-SU-2021:4002-1
Security update for python-pip
openSUSE-SU-2021:4001-1
Security update for python-pip
openSUSE-SU-2021:1598-1
Security update for python-pip
SUSE-SU-2022:1094-1
Security update for python36
SUSE-SU-2022:1044-1
Security update for python3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-1772 ALT-PU-2021-1772: package `python3-module-pip` update to version 21.1.1-alt1 | CVSS3: 6.5 | больше 5 лет назад | |
 | CVE-2021-28363 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-28363 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-28363 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-28363 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. | 2% Низкий | около 1 года назад | |
| CVE-2021-28363 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certific ... | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
| CVE-2021-3572 A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. | CVSS3: 5.7 | 2% Низкий | почти 5 лет назад |
| CVE-2021-3572 A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. | CVSS3: 4.5 | 2% Низкий | больше 5 лет назад |
| CVE-2021-3572 A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. | CVSS3: 5.7 | 2% Низкий | почти 5 лет назад |
| CVSS3: 5.7 | 2% Низкий | больше 4 лет назад | |
| CVE-2021-3572 A flaw was found in python-pip in the way it handled Unicode separator ... | CVSS3: 5.7 | 2% Низкий | почти 5 лет назад |
| GHSA-5phf-pp7p-vc2r Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | BDU:2025-04191 Уязвимость HTTP библиотеки Urllib3 языка программирования Python, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | openSUSE-SU-2022:0942-1 Security update for python3 | 2% Низкий | больше 4 лет назад | |
| openSUSE-SU-2022:0064-1 Security update for python39-pip | 2% Низкий | почти 5 лет назад | |
| openSUSE-SU-2021:4002-1 Security update for python-pip | 2% Низкий | почти 5 лет назад | |
| openSUSE-SU-2021:4001-1 Security update for python-pip | 2% Низкий | почти 5 лет назад | |
| openSUSE-SU-2021:1598-1 Security update for python-pip | 2% Низкий | почти 5 лет назад | |
| SUSE-SU-2022:1094-1 Security update for python36 | 2% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:1044-1 Security update for python3 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу