CVE-2024-35195

MEDIUM Year: 2024
CVSS v3 Score
5.6
Medium
Weakness Type
CWE-670
View all →

Vulnerability Description

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

Related Vulnerabilities

CVE-2020-25598

MEDIUM
CVSS:5.5(Medium)

An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in...

CWE-6702020

CVE-2021-32684

MEDIUM
CVSS:5.5(Medium)

magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the fun...

CWE-6702021

CVE-2024-0313

MEDIUM
CVSS:5.5(Medium)

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass ...

CWE-6702024

CVE-2024-47763

MEDIUM
CVSS:5.5(Medium)

Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run...

CWE-6702024

CVE-2024-53134

MEDIUM
CVSS:5.5(Medium)

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: correct remove path The check condition should be 'i < bc->onecell_data.num_domains', not 'bc->onecell_dat...

CWE-6702024

CVE-2020-35477

MEDIUM
CVSS:5.3(Medium)

MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggle...

CWE-6702020