29 matches found
numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have...
Arbitrary Code Execution
numpy is vulnerable to arbitrary code execution. A use-after-free in arraytypes.c.src occurs when constructing object array from a void array, which would potentially allow an attacker to execute arbitrary code...
Exploit for Deserialization of Untrusted Data in Numpy
CVE-2019-6446: NumPy deserialization command execution NumP...
The vulnerability of the NumPy module for Python, which allows a hacker to execute arbitrary code
The vulnerability of the NumPy module for Python is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2019-6446
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have...
AZL-41294 CVE-2018-1999024 affecting package numpy for versions less than 1.26.3-4
MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...
CVE-2014-1859
1 core/tests/testmemmap.py, 2 core/tests/testmultiarray.py, 3 f2py/f2py2e.py, and 4 lib/tests/testio.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file...
