Lucene search
+L

59678 matches found

Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.19 views

PT-2026-52089

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.52 Description The Fill Text Template block is susceptible to a Denial of Service DoS attack. Although the backend utilizes a SandboxedEnvironment to block unauthorized attribute access, such as class , it does no...

7.7CVSS5.8AI score0.0031EPSS
SaveExploits0References5
Redos
Redos
added 2026/06/24 12:0 a.m.5 views

ROS-20260624-73-0047

The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

6.9CVSS6.1AI score0.00292EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:0 a.m.5 views

ROS-20260624-73-0044

The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

6.9CVSS6.1AI score0.00315EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:0 a.m.7 views

ROS-20260624-73-0042

The vulnerability in python-aiohttp is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.9AI score0.0044EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:0 a.m.6 views

ROS-20260624-73-0046

The vulnerability in python-aiohttp is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

8.7CVSS5.9AI score0.0044EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2026/06/24 12:0 a.m.6 views

python-urllib3 security update

1.26.5-8 - Security fix for CVE-2026-44431 and CVE-2026-44432 Resolves: RHEL-184816, RHEL-185123 1.26.5-7 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-142750, RHEL-139398, RHEL-142767...

8.9CVSS5.8AI score0.02667EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.17 views

AlmaLinux 10 : python3.14-urllib3 (ALSA-2026:27929)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:27929 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origi...

8.9CVSS5.9AI score0.0068EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.12 views

Debian dsa-6363 : python3-urllib3 - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6363 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6363-1 [email protected] https://www.debian.org/security/ Moritz...

8.2CVSS5.8AI score0.00331EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.22 views

AlmaLinux 10 : python-urllib3 (ALSA-2026:28000)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:28000 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origi...

8.9CVSS5.9AI score0.0068EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.13 views

AlmaLinux 10 : python3.14 (ALSA-2026:28581)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:28581 advisory. python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open API CVE-2026-4786 python: Python: Cross-Site Scripting XSS...

7.1CVSS6.4AI score0.0029EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.12 views

Oracle Linux 9 : python3.9 (ELSA-2026-18693)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18693 advisory. - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 Tenable has...

9.1CVSS7AI score0.00579EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.15 views

RHEL 9 : python3.14 (RHSA-2026:28247)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28247 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

7.1CVSS7.6AI score0.0029EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.12 views

RHEL 10 : python3.14 (RHSA-2026:28581)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28581 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

7.1CVSS6.4AI score0.0029EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.17 views

Oracle Linux 9 : python-markdown (ELSA-2026-19366)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19366 advisory. 3.3.4-4.2 - Fix CVE-2025-69534 RHEL-153747 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

8.2CVSS7.4AI score0.00566EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.13 views

RockyLinux 9 : python3.12-urllib3 (RLSA-2026:28159)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:28159 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origi...

8.9CVSS5.9AI score0.0068EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/23 11:39 p.m.14 views

python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

A flaw was found in Python's http.cookies module. The Morsel.jsoutput function, responsible for generating JavaScript output for cookies, does not properly neutralize the HTML sequence. This oversight could allow a remote attacker to inject malicious script into a web page, potentially leading to...

6.1CVSS6.4AI score0.00229EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2026/06/23 11:39 p.m.13 views

python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/06/23 11:39 p.m.18 views

Important: Red Hat Security Advisory: python3.14 security, bug fix, and enhancement update

An update for python3.14 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

7.1CVSS6.4AI score0.0029EPSS
SaveExploits1References3
Debian
Debian
added 2026/06/23 6:23 p.m.11 views

[SECURITY] [DSA 6363-1] python-urllib3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6363-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 23, 2026 https://www.debian.org/security/faq -...

8.2CVSS5.7AI score0.00331EPSS
SaveExploits0
OSV
OSV
added 2026/06/23 6:17 p.m.8 views

CVE-2026-53753 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the safeevalexpression function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes giframe, fback, fbuiltins do NOT...

9.8CVSS6.2AI score0.0061EPSS
SaveExploits2References3
Rows per page
Query Builder