https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:26:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-69757 EUVD-2026-69757 https://cve.radiocsirt.org/vuln/euvd-2026-69757 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19443 <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-19443 https://cve.radiocsirt.org/vuln/ghsa-32w7-9whp-cjp9 <p><strong>Affected:</strong> PyPI: tryton</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> <p><strong>Affected:</strong> PyPI: tryton</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> https://cve.radiocsirt.org/vuln/ghsa-32w7-9whp-cjp9 https://cve.radiocsirt.org/vuln/gsd-2018-19443 gsd-2018-19443 https://cve.radiocsirt.org/vuln/gsd-2018-19443 https://cve.radiocsirt.org/vuln/pysec-2018-77 <p><strong>Affected:</strong> PyPI: tryton</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> <p><strong>Affected:</strong> PyPI: tryton</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> https://cve.radiocsirt.org/vuln/pysec-2018-77 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19443 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tryton-client, Ubuntu:18.04:LTS: tryton-client, Ubuntu:20.04:LTS: tryton-client, Ubuntu:22.04:LTS: tryton-client, Ubuntu:24.04:LTS: tryton-client, Ubuntu:25.10: tryton-client, Ubuntu:26.04:LTS: tryton-client</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tryton-client, Ubuntu:18.04:LTS: tryton-client, Ubuntu:20.04:LTS: tryton-client, Ubuntu:22.04:LTS: tryton-client, Ubuntu:24.04:LTS: tryton-client, Ubuntu:25.10: tryton-client, Ubuntu:26.04:LTS: tryton-client</p> <p>The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19443