https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:41:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-107370 EUVD-2026-107370 https://cve.radiocsirt.org/vuln/euvd-2026-107370 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4347 <p>The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.</p> <p>The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4347 https://cve.radiocsirt.org/vuln/ghsa-rv8h-p43r-4x5r <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.</p> <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.</p> https://cve.radiocsirt.org/vuln/ghsa-rv8h-p43r-4x5r https://cve.radiocsirt.org/vuln/gsd-2013-4347 gsd-2013-4347 https://cve.radiocsirt.org/vuln/gsd-2013-4347 https://cve.radiocsirt.org/vuln/pysec-2014-86 <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.</p> <p><strong>Affected:</strong> PyPI: oauth2</p> <p>The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.</p> https://cve.radiocsirt.org/vuln/pysec-2014-86 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> <p>TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1591