LMDB invalid write

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation...

GHSA-9Q62-R72G-PVV7 py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

GHSA-C74C-P4P7-R8Q5 py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), medaka-cpu (1.5.0) +4 more potentially affected by CVE-2022-29193 via tensorflow-cpu (>=2.1.0, <=2.5.3)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.5.1, =0.102.0.dev0, =1.5.2, =1.7.4 Source cves: CVE-2022-29193 Source advisory: OSV:GHSA-2P9Q-H29J-3F5V...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), gamornet-cpu (>=0.2.3, <=0.4.3) +7 more potentially affected by CVE-2022-29208 via tensorflow-cpu (>=1.15.0, <=2.5.3)

tensorflow-cpu PYPI version =1.15.0, =0.1.0.dev1, =0.2.3, =0.5.1, =0.102.0.dev0, =1.5.2, =0.7.0, =0.7.5 Source cves: CVE-2022-29208 Source advisory: MEND:CVE-2022-29208...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), gamornet-cpu (>=0.2.3, <=0.4.3) +7 more potentially affected by CVE-2022-29193 via tensorflow-cpu (>=1.15.0, <=2.5.3)

tensorflow-cpu PYPI version =1.15.0, =0.1.0.dev1, =0.2.3, =0.5.1, =0.102.0.dev0, =1.5.2, =0.7.0, =0.7.5 Source cves: CVE-2022-29193 Source advisory: MEND:CVE-2022-29193...

dfnclient (>=0.0.1, <=0.4.6), django-afip (>=1.0.2, <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0, <=1.4.1.0)

suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: GHSA-VPQP-HX68-P2WX...

CVE-2022-30286

pyscriptjs aka PyScript Demonstrator in PyScript through 2022-05-04 allows a remote user to read Python source code...

Exploit for Incorrect Authorization in Polkit_Project Polkit

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalatio...

py-httpx -- input validation vulnerability

lebr0nli reports: Encode OSS httpx =1.0.0.beta0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copywith...

admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2022-24303 via pillow (4.1.1)

pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2022-24303 Source advisory: OSV:PYSEC-2022-168...

balebot (>=1.2.8, <=1.8.15), demosys-py (>=1.0.6, <=2.0.3) +19 more potentially affected by CVE-2022-24303 via pillow (5.2.0)

pillow PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - balebot =1.2.8, =1.0.6, =0.3.0, =1.0.7, =1.2.1, =1.8.3, =2.1.0, =2.0.3, =2.1.0 - poltools 1.0.0 and more Source cves: CVE-2022-24303 Source advisory...

OESA-2022-1562 python-py security update

Library with cross-python path, ini-parsing, io, code, log facilities. Security Fixes: A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious inp...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-202...

Man-in-the-Middle (MitM)

Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to...

FreeBSD : py-twisted -- cookie and authorization headers are leaked when following cross-origin redirects (24049967-88ec-11ec-88f5-901b0e934d69)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 24049967-88ec-11ec-88f5-901b0e934d69 advisory. - Twisted developers report: Cookie and Authorization headers are leaked when following cross-origin...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), opennsfw-standalone (0.0.4) +3 more potentially affected by CVE-2022-23579 via tensorflow-cpu (>=2.1.0, <=2.4.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.5.1, =0.102.0.dev0, =1.5.2, =1.7.4 Source cves: CVE-2022-23579 Source advisory: GHSA-5F2R-QP73-37MR...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), opennsfw-standalone (0.0.4) +3 more potentially affected by CVE-2022-23579 via tensorflow-cpu (>=2.1.0, <=2.4.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.5.1, =0.102.0.dev0, =1.5.2, =1.7.4 Source cves: CVE-2022-23579 Source advisory: OSV:GHSA-5F2R-QP73-37MR...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), opennsfw-standalone (0.0.4) +3 more potentially affected by CVE-2022-23578 via tensorflow-cpu (>=2.1.0, <=2.4.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.5.1, =0.102.0.dev0, =1.5.2, =1.7.4 Source cves: CVE-2022-23578 Source advisory: OSV:GHSA-8R7C-3CM2-3H8F...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), opennsfw-standalone (0.0.4) +3 more potentially affected by CVE-2022-23578 via tensorflow-cpu (>=2.1.0, <=2.4.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.5.1, =0.102.0.dev0, =1.5.2, =1.7.4 Source cves: CVE-2022-23578 Source advisory: GHSA-8R7C-3CM2-3H8F...