Lucene search
+L

42 matches found

Vulnrichment
Vulnrichment
•added 2022/11/07 12:00 a.m.•5 views

CVE-2022-43305

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...

9.7AI score0.01139EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/07 12:00 a.m.•22 views

Democritus Project code-related vulnerabilities

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. Democritus Project d8s-python has a security vulnerability that stems from its inclusion of a potential code execution backdoor inserted by a third party. An attacker could...

9.8CVSS8.1AI score0.01115EPSS
SaveExploits0References4
CVE
CVE
•added 2022/11/07 12:00 a.m.•81 views

CVE-2022-44049

CVE-2022-44049 concerns the PyPI package d8s-python for Python, with version 0.1.0 affected. The root cause is a suspected backdoor introduced by a third party via the democritus-grammars package, enabling potential code execution. Several connected sources corroborate a code-execution risk in th...

9.8CVSS9.7AI score0.01115EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/07 12:00 a.m.•21 views

PT-2022-26839 · D8S-Htm +2 · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-python affected versions not specified democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-python package distributed on PyP...

9.8CVSS9.6AI score0.01139EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/11/07 12:00 a.m.•11 views

PT-2022-37357 · Unknown +2 · Democritus-Algorithms +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-python affected versions not specified democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-python package distributed on PyP...

9.8CVSS7.5AI score
SaveExploits0References4
Mend
Mend
•added 2022/11/07 12:00 a.m.•7 views

CVE-2022-44049

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0...

9.8CVSS0.01115EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/11/07 12:00 a.m.•11 views

CVE-2022-44049

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0...

9.8AI score0.01115EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2022/10/11 10:15 p.m.•2 views

d8s-python (0.4.0) potentially affected by CVE-2022-42040 via d8s-algorithms (0.3.0)

d8s-algorithms PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-algorithms and may be impacted: - d8s-python 0.4.0 Source cves: CVE-2022-42040 Source advisory: OSV:PYSEC-2022-43019...

9.8CVSS8.3AI score0.06658EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/10/11 10:15 p.m.•4 views

d8s-python (0.4.0) potentially affected by CVE-2022-42039 via d8s-lists (0.3.0)

d8s-lists PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-lists and may be impacted: - d8s-python 0.4.0 Source cves: CVE-2022-42039 Source advisory: OSV:PYSEC-2022-43027...

9.8CVSS0.01633EPSS
SaveExploits1
osv_pysec
osv_pysec
•added 2022/09/19 4:15 p.m.•15 views

PYSEC-2022-43083

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS7.2AI score
SaveExploits0References3
PyPA
PyPA
•added 2022/09/19 4:15 p.m.•29 views

PYSEC-2022-43125

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS7AI score0.01699EPSS
SaveExploits1References4Affected Software1
osv_pysec
osv_pysec
•added 2022/09/19 4:15 p.m.•11 views

PYSEC-2022-43125

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS7.2AI score
SaveExploits0References3
PyPA
PyPA
•added 2022/09/19 4:15 p.m.•23 views

PYSEC-2022-43083

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS7AI score0.01699EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2022/09/19 3:38 p.m.•80 views

CVE-2022-38887

CVE-2022-38887 affects the d8s-python package for Python distributed on PyPI. The vulnerability arises from a backdoor inserted by a third party in the democritus-strings package, with the affected version identified as 0.1.0. The NVD/CVE data lists a critical impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:...

9.8CVSS9.4AI score0.01699EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/09/19 3:38 p.m.•58 views

CVE-2022-38887

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.7AI score0.01699EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/09/19 3:38 p.m.•31 views

CVE-2022-38887

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS6.9AI score
SaveExploits0References5
Mend
Mend
•added 2022/09/19 3:38 p.m.•11 views

CVE-2022-38887

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS0.01699EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•7 views

PT-2022-37346 · Pypi · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-python version 0.1.0 Description: The issue concerns a potential code-execution backdoor inserted by a third party into the d8s-python package distributed on PyPI. This backdoor is related to the democritus-strings package. Recommendation...

9.8CVSS7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•7 views

CVE-2022-38887: Unrestricted Upload of File with Dangerous Type

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.01699EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•27 views

PT-2022-24612 · Pypi · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-python version 0.1.0 Description: The d8s-python package for python, distributed on PyPI, contains a potential code-execution backdoor inserted by a third party, specifically affecting the democritus-strings package. Recommendations: For...

9.8CVSS9.4AI score0.01699EPSS
SaveExploits1References5
Rows per page
Query Builder