Skip to content
OpenAdvisories

Archive

5 November 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2013-5123 Public exploit

    Improper Authentication in pip

    The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

  • Medium 5.8
    CVE-2019-1978 Public exploit

    Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability

    A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protec…