Lucene search
+L

689 matches found

UbuntuCve
UbuntuCve
added 2018/09/18 12:00 a.m.29 views

CVE-2018-1000802

Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in shutil module makearchive function that can result in Denial of service, Information gain via injection of arbitrary files on...

9.8CVSS6.8AI score0.20807EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2018/07/26 4:08 p.m.32 views

Code injection in rope

base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...

9.8CVSS9.5AI score0.02995EPSS
SaveExploits0References6Affected Software1
Kitploit
Kitploit
added 2018/07/20 10:21 p.m.54 views

Security Monkey - Tool To Monitors Your AWS And GCP Accounts For Policy Changes And Alerts On Insecure Configurations

Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure configurations. Support is available for OpenStack public and private clouds. Security Monkey can also watch and monitor your GitHub organizations, teams, and repositories. It provides a single UI to brow...

7.3AI score
SaveExploits0References17
OSV
OSV
added 2018/04/06 4:29 p.m.11 views

CVE-2014-3539

base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...

9.8CVSS9.7AI score
SaveExploits0References4
OSV
OSV
added 2018/04/06 4:29 p.m.29 views

PYSEC-2018-100

base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...

9.8CVSS7.6AI score0.02995EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/04/06 4:00 p.m.25 views

CVE-2014-3539

base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...

9.7AI score0.02995EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2018/04/06 4:00 p.m.38 views

CVE-2014-3539

base/oi/doa.py in the Rope library in CPython aka Python allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...

9.8CVSS9.8AI score0.02995EPSS
SaveExploits0
CNVD
CNVD
added 2018/03/09 12:00 a.m.10 views

Python Software Foundation CPython on Windows Buffer Overflow Vulnerability

Python Software Foundation CPython on Windows is the Python Software Foundation's suite of Windows-based, open-source, object-oriented programming languages that are extensible, support modules and packages, and support multiple platforms.CPython also known as Python is a Python interpreter...

7.2CVSS9.9AI score0.01083EPSS
SaveExploits1References1
Prion
Prion
added 2018/03/07 2:29 p.m.48 views

Buffer overflow

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

7.2CVSS7AI score0.01083EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2018/03/07 2:29 p.m.19 views

CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

7.2CVSS6.9AI score0.01083EPSS
SaveExploits1References4
NVD
NVD
added 2018/03/07 2:29 p.m.37 views

CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

7.2CVSS6.8AI score0.01083EPSS
SaveExploits1References2
OSV
OSV
added 2018/03/07 2:29 p.m.16 views

CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

6.7CVSS7.1AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2018/03/07 2:00 p.m.68 views

CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

7.2CVSS8.3AI score0.01083EPSS
SaveExploits1
CVE
CVE
added 2018/03/07 2:00 p.m.233 views

CVE-2018-1000117

CVE-2018-1000117 affects CPython on Windows: buffer overflow in os.symlink() from Python 3.2–3.6.4 can enable arbitrary code execution with privilege escalation; exploit via attacker-controlled symlink. Fixed in Python 3.6.5 and 3.7.0. Upgrade to these or later to remediate.

7.2CVSS6.9AI score0.01083EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2018/03/07 2:00 p.m.45 views

CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

7AI score0.01083EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2018/02/09 12:00 a.m.33 views

Amazon Linux AMI : python27 (ALAS-2018-945)

Integer overflow in PyStringDecodeEscape results in heap-base buffer overflow CPython aka Python is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-based buffer overflow and possible arbitrary code execution CVE-2017-1000158 C Tenable...

9.8CVSS7.5AI score0.07944EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/01/19 12:00 a.m.42 views

Amazon Linux AMI : python35 / python34 (ALAS-2018-943)

CPython aka Python is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-based buffer overflow and possible arbitrary code execution CVE-2017-1000158 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

9.8CVSS7.5AI score0.07944EPSS
SaveExploits0References2
Amazon
Amazon
added 2018/01/17 12:00 a.m.38 views

Medium: python35, python34

Issue Overview: CPython aka Python is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-based buffer overflow and possible arbitrary code execution CVE-2017-1000158 Affected Packages: python35, python34 Issue Correction: Run yum update...

9.8CVSS8.5AI score0.07944EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/01/11 12:00 a.m.28 views

Debian: Security Advisory (DLA-871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.14524EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2017/12/18 12:00 a.m.32 views

EulerOS 2.0 SP2 : python (EulerOS-SA-2017-1335)

According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - CPython aka Python up to 2.7.13 is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-base...

9.8CVSS7.2AI score0.07944EPSS
SaveExploits0References2
Rows per page
Query Builder