Lucene search
+L

47 matches found

OSV
OSV
added 2024/06/28 12:33 a.m.44 views

GHSA-CGVX-9447-VCCH ntlk unsafe deserialization vulnerability

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

7.5CVSS9.7AI score0.01346EPSS
SaveExploits0References7
PyPA
PyPA
added 2024/06/27 10:15 p.m.9 views

PYSEC-2024-167

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

9.8CVSS8.2AI score0.01346EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2024/06/27 10:15 p.m.34 views

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

9.8CVSS7.4AI score0.01346EPSS
SaveExploits0References3
CVE
CVE
added 2024/06/27 12:0 a.m.314 views

CVE-2024-39705

CVE-2024-39705 affects the Natural Language Toolkit (NLTK) up to version 3.8.1, enabling remote code execution when untrusted packages contain pickled Python code and the data package download feature is used. Affected in-core components cited include averaged_perceptron_tagger and punkt. Remedia...

9.8CVSS8AI score0.01346EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/06/27 12:0 a.m.184 views

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

0.01346EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2024/06/27 12:0 a.m.34 views

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

9.8CVSS7.7AI score0.01346EPSS
SaveExploits0
OSV
OSV
added 2024/06/27 12:0 a.m.26 views

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

9.8CVSS7.8AI score0.01346EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2024/06/21 10:24 a.m.91 views

Remote code execution vulnerability in NLTK

The current and earlier versions of NLTK are vulnerable to a rem...

8.4AI score
SaveExploits0
OSV
OSV
added 2024/06/15 12:0 a.m.18 views

OPENSUSE-SU-2024:12815-1 liblouis-data-3.25.0-1.1 on GA media

These are all security issues fixed in the liblouis-data-3.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.6AI score0.01345EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/15 12:0 a.m.13 views

OPENSUSE-SU-2024:10953-1 liblouis-data-3.16.1-1.5 on GA media

These are all security issues fixed in the liblouis-data-3.16.1-1.5 package on the GA media of openSUSE Tumbleweed...

9.8CVSS7.9AI score0.05046EPSS
SaveExploits1References9
OSV
OSV
added 2024/06/15 12:0 a.m.12 views

OPENSUSE-SU-2024:13012-1 libldap-data-2.6.4-2.1 on GA media

These are all security issues fixed in the libldap-data-2.6.4-2.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.8AI score0.01947EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/26 12:0 a.m.10 views

RG-EW Series Routers 命令注入漏洞

Ruijie RG-EW Series Routers is a router from China Ruijie Networks Ruijie. A security vulnerability exists in RG-EW1200G PRO Wireless Routers EW3.01B11P204 version, RG-EW1800GX PRO Wireless Routers EW3.01B11P204 version, RG-EW3200GX PRO Wireless Routers EW3.0 A security vulnerability exists in...

8.8CVSS8AI score0.02346EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.5 views

Malicious code in docs-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cb20c98a1f5ad664b0515644f7003fe4b63ac10a109089ca520c41840cf85c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/11 12:15 a.m.6 views

CVE-2022-25511

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

6.5CVSS5.6AI score0.0073EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.8 views

The vulnerabilities of the programmable logic controllers MELSEC iQ-R, MELSEC Q, and MELSEC L stem from insufficient checks on input data. This allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of the programmable logic controllers MELSEC iQ-R, MELSEC Q, and MELSEC L exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions through a specially crafted package...

7.8CVSS7.2AI score0.02988EPSS
SaveExploits0References4Affected Software10
OpenVAS
OpenVAS
added 2021/07/05 12:0 a.m.14 views

Debian: Security Advisory (DLA-2703-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.9 views

The vulnerability of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One software suite, allows a hacker to execute arbitrary code.

The vulnerabilities of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One...

10CVSS7.7AI score0.02669EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.5 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kdelibs-data package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

6.8CVSS5.4AI score0.28054EPSS
SaveExploits49References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.9 views

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the guestfs-data package in the SUSE Linux Enterprise operating system, its use of which may lead to breaches of confidentiality, integrity, and accessibility of protected information...

6.8CVSS5.5AI score0.00754EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.15 views

The vulnerability of the OpenSUSE operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the mono-data package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

5CVSS5.4AI score0.05115EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder