aio-libs records

4 published records for vendor aio-libs.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2018-1000519No exploit	aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-liaio-libs · aiohttp session · CWE-384 Pre-auth	Medium6.5	—	1.2%	Jun 26, 2018
26Monitor	CVE-2018-1000814No exploit	aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage thaio-libs · aiohttp session · CWE-613	Medium6.5	—	1.0%	Dec 20, 2018
21Monitor	CVE-2024-27305No exploit	SMTP smuggling in aiosmtpdaio-libs · aiosmtpd · CWE-345 Pre-auth	Medium5.3	—	0.4%	Mar 12, 2024
21Monitor	CVE-2024-34083No exploit	STARTTLS unencrypted commands injectionaio-libs · aiosmtpd · CWE-349 Pre-auth	Medium5.4	—	0.2%	May 18, 2024

CVE-2018-1000519
26Monitor
aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-li
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
aio-libs · aiohttp sessionJun 26, 2018
CVE-2018-1000814
26Monitor
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage th
MediumCVSS 6.5No exploitEPSS 1%
aio-libs · aiohttp sessionDec 20, 2018
CVE-2024-27305
21Monitor
SMTP smuggling in aiosmtpd
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
aio-libs · aiosmtpdMar 12, 2024
CVE-2024-34083
21Monitor
STARTTLS unencrypted commands injection
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
aio-libs · aiosmtpdMay 18, 2024