Most recent entries from all

bdu:2019-02525

Withdrawn: BELL-CVE-2019-12387 — CVE-2019-12387 does not affect BellSoft software

Withdrawn by the publisher.

BREW-alot-CVE-2019-12387 — Twisted CRLF Injection

Affected: Homebrew: alot

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

cnvd-2019-22657

EUVD-2026-54990

fkie_cve-2019-12387

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

GHSA-6cc5-2vg4-cc7m — Twisted CRLF Injection

Affected: PyPI: twisted

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

gsd-2019-12387

openSUSE-SU-2019:1760-1 — Security update for python-Twisted

Security update for python-Twisted

PYSEC-2019-128

Affected: PyPI: twisted

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

RHSA-2019:3172 — Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update

python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py python-jinja2: Sandbox escape due to information disclosure via str.format rubygem-rack: Buffer size in multipart parser allows for denial of service dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents foreman: Recover of plaintext password or token for the compute resources foreman: authorization bypasses in foreman-tasks leading to information disclosure python-jinja2: str.format_map allows sandbox escape python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods katello: registry credentials are captured in plain text during repository discovery

SUSE-SU-2019:2066-1 — Security update for python-Twisted

Security update for python-Twisted

UBUNTU-CVE-2019-12387

Affected: Ubuntu:Pro:14.04:LTS: twisted, Ubuntu:16.04:LTS: twisted, Ubuntu:18.04:LTS: twisted

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

WID-SEC-W-2025-2548 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.