Lucene search
+L

1189 matches found

OSV
OSV
added 2021/11/09 8:37 a.m.32 views

ALSA-2021:4201 Moderate: babel security and bug fix update

Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc. Security Fixes: python-babel: Relative path traversal allows attacke...

7.8CVSS8.2AI score0.00716EPSS
SaveExploits1References3
Rockylinux
Rockylinux
added 2021/11/09 8:37 a.m.36 views

babel security and bug fix update

An update is available for babel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Babel provides tools to build and work with gettext message catalogs, and a...

7.8CVSS1.5AI score0.00716EPSS
SaveExploits1
AlmaLinux
AlmaLinux
added 2021/11/09 8:37 a.m.60 views

Moderate: babel security and bug fix update

Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc. Security Fixes: python-babel: Relative path traversal allows attacke...

7.8CVSS8.3AI score0.00716EPSS
SaveExploits1References3
Rockylinux
Rockylinux
added 2021/11/09 8:24 a.m.50 views

python27:2.7 security update

An update is available for python-pymongo, python2-rpm-macros, python-sqlalchemy, python-backports, python-docutils, pytest, python-psycopg2, python-lxml, python-PyMySQL, python-urllib3, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock,...

9.8CVSS8.1AI score0.36006EPSS
SaveExploits5
CBLMariner
CBLMariner
added 2021/11/06 12:29 a.m.16 views

CVE-2021-42771 affecting package babel 2.6.0-9

CVE-2021-42771 affecting package babel 2.6.0-9. A patched version of the package is available...

7.8CVSS8AI score0.00716EPSS
SaveExploits1
Photon
Photon
added 2021/11/04 12:0 a.m.42 views

Important Photon OS Security Update - PHSA-2021-4.0-0123

Updates of 'python3-babel' packages of Photon OS have been released...

7.8CVSS1.7AI score0.00716EPSS
SaveExploits1
Photon
Photon
added 2021/11/03 12:0 a.m.47 views

Important Photon OS Security Update - PHSA-2021-0123

Updates of 'python3-babel' packages of Photon OS have been released...

7.2CVSS1.7AI score0.00716EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2021/10/26 7:0 a.m.6 views

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal leading to code execution.

...

7.8CVSS8.7AI score0.00716EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/10/25 12:0 a.m.30 views

EulerOS 2.0 SP3 : babel (EulerOS-SA-2021-2571)

According to the versions of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-20095 Note that...

9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2021/10/22 5:14 p.m.56 views

CVE-2021-42771

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

7.8CVSS4.4AI score0.00716EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/10/22 12:0 a.m.30 views

Debian: Security Advisory (DLA-2790-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.00716EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/10/21 5:49 p.m.133 views

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS6.5AI score0.00716EPSS
SaveExploits1References9Affected Software1
vulnersOsv
vulnersOsv
added 2021/10/21 5:49 p.m.5 views

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +13125 more potentially affected by CVE-2021-42771 via babel (>=1.0.0 <=2.9.0)

babel PYPI version =1.0.0, =0.1.0.dev384, =0.1.0, =1.0.3, =1.0.0, =0.0.3, =0.1.0, =1.0.3, =0.1.0, =0.1.2 and more Source cves: CVE-2021-42771 Source advisory: OSV:GHSA-H4M5-QPFP-3MPV...

7.8CVSS6.8AI score0.00716EPSS
SaveExploits1
OSV
OSV
added 2021/10/21 5:49 p.m.9 views

GHSA-H4M5-QPFP-3MPV Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

8.7CVSS7AI score0.00716EPSS
SaveExploits1References10
Debian
Debian
added 2021/10/21 9:56 a.m.36 views

[SECURITY] [DLA 2790-1] python-babel security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2790-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 21, 2021 https://wiki.debian.org/LTS -...

7.8CVSS8.1AI score0.00716EPSS
SaveExploits1
Veracode
Veracode
added 2021/10/21 4:31 a.m.37 views

Directory Traversal

babel is vulnerable to directory traversal. The library does not clean the locale identifiers properly before loading from file, allowing a malicious user to load arbitrary locale .dat files...

7.8CVSS4.2AI score0.00716EPSS
SaveExploits1References6Affected Software6
OSV
OSV
added 2021/10/21 12:0 a.m.32 views

DLA-2790-1 python-babel - security update

Bulletin has no description...

7.8CVSS7.8AI score0.00716EPSS
SaveExploits1
OSV
OSV
added 2021/10/20 9:15 p.m.5 views

ALPINE-CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.7AI score0.00716EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/20 9:15 p.m.27 views

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.4AI score
SaveExploits0References5
OSV
OSV
added 2021/10/20 9:15 p.m.8 views

AZL-6325 CVE-2021-42771 affecting package babel for versions less than 2.9.1-1

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.2AI score0.00716EPSS
SaveExploits1References1
Rows per page
Query Builder