Lucene search
K

663 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-6232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are...

7.5CVSS6.8AI score0.02203EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-6923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines for email headers when serializing an email message...

5.5CVSS6.8AI score0.00737EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-0450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to...

6.2CVSS6.9AI score0.00333EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2014-9365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTTP clients in the 1 httplib, 2 urllib, 3 urllib2, and 4 xmlrpclib libraries in CPython aka Python 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an...

5.8CVSS7AI score0.03269EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2016-5636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the getdata function in zipimport.c in CPython aka Python before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to...

10CVSS7.4AI score0.25671EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/02/28 12:0 a.m.6 views

CPython 安全漏洞

CPython is a Python interpreter implemented in C from the Python Foundation. A security vulnerability exists in CPython that stems from commas being Unicode-encoded when collapsing address lists, which could cause mail servers to misinterpret address headers...

2.3CVSS6.1AI score0.00566EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2025/02/26 12:0 a.m.9 views

Amazon Linux 2 : python3 (ALAS-2025-2766)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2766 advisory. A defect was discovered in the Python ssl module where there is a memoryrace condition with the ssl.SSLContext methods...

7.4CVSS6.8AI score0.00804EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/26 12:0 a.m.15 views

Amazon Linux 2 : python-ipaddress (ALAS-2025-2761)

The version of python-ipaddress installed on the remote host is prior to 1.0.16-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2761 advisory. The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as...

7.5CVSS6.8AI score0.01042EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/26 12:0 a.m.18 views

Amazon Linux 2 : python3 (ALAS-2025-2762)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2762 advisory. The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as globally...

7.5CVSS6.8AI score0.01042EPSS
Exploits0References4
OSV
OSV
added 2025/02/19 7:17 a.m.18 views

BIT-PYTHON-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.2AI score0.00478EPSS
Exploits0References2
OSV
OSV
added 2025/02/19 7:17 a.m.5 views

BIT-PYTHON-MIN-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.2AI score0.00478EPSS
Exploits0References2
NVD
NVD
added 2025/02/14 5:15 p.m.11 views

CVE-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS0.00478EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/02/14 4:18 p.m.27 views

CVE-2024-3220 Default mimetype known files writeable on Windows

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS0.00478EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/14 4:18 p.m.18 views

CVE-2024-3220 Default mimetype known files writeable on Windows

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.8AI score0.00478EPSS
Exploits0References1
CVE
CVE
added 2025/02/14 4:18 p.m.72 views

CVE-2024-3220

CVE-2024-3220 affects the CPython standard library mimetypes module. On Windows, the default known-file locations (and on other platforms via the same locations) are writable, allowing a user to create invalid files and potentially trigger MemoryError at Python startup or cause mis-interpretation...

2.3CVSS6.8AI score0.00478EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/02/14 4:18 p.m.7 views

CVE-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS5AI score0.00478EPSS
Exploits0
F5 Networks
F5 Networks
added 2025/02/11 11:40 p.m.13 views

K000149756: Python vulnerability CVE-2024-9287

Security Advisory Description A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source...

7.8CVSS7.8AI score0.00647EPSS
Exploits0Affected Software2
OpenVAS
OpenVAS
added 2025/02/10 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2025-1195)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.00647EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.5 views

EulerOS 2.0 SP11 : python3 (EulerOS-SA-2025-1143)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted...

7.8CVSS6.8AI score0.00647EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.12 views

Azure Linux 3.0 Security Update: python3 (CVE-2023-6597)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6597 advisory. - An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7,...

7.8CVSS7.1AI score0.0031EPSS
Exploits0References2
Rows per page
Query Builder