https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:41:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-107415 EUVD-2026-107415 https://cve.radiocsirt.org/vuln/euvd-2026-107415 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4346 <p>The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.</p> <p>The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4346 https://cve.radiocsirt.org/vuln/ghsa-4433-4cxq-vv73 <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. The vulnerability does not appear to be patched according to the following [discussion](https://github.com/joestump/python-oauth2/issues/129#issuecomment-895911502).</p> <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. The vulnerability does not appear to be patched according to the following [discussion](https://github.com/joestump/python-oauth2/issues/129#issuecomment-895911502).</p> https://cve.radiocsirt.org/vuln/ghsa-4433-4cxq-vv73 https://cve.radiocsirt.org/vuln/gsd-2013-4346 gsd-2013-4346 https://cve.radiocsirt.org/vuln/gsd-2013-4346 https://cve.radiocsirt.org/vuln/pysec-2014-85 <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.</p> <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.</p> https://cve.radiocsirt.org/vuln/pysec-2014-85 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1591