Lucene search
+L

242 matches found

CNNVD
CNNVD
•added 2021/12/17 12:00 a.m.•17 views

Pyo 安全漏洞

Pyo is a Python module written in C by the individual developer Olivier Belanger. It is used to help create digital signal processing scripts. ajaxsoundstudio.com A security vulnerability exists in versions of Pyo prior to 1.03, which can be exploited by an attacker to conduct a DoS attack by...

7.5CVSS7.3AI score0.01401EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/17 12:00 a.m.•19 views

ajaxsoundstudio.com Pyo安全漏洞

Pyo is a Python module written in C by the individual developer Olivier Belanger. It is used to help create digital signal processing scripts. ajaxsoundstudio.com A security vulnerability exists in Pyo version 1.03, which can be exploited by an attacker to conduct a denial-of-service attack by...

7.5CVSS7.3AI score0.01194EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/08 3:15 p.m.•21 views

CVE-2021-39182

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

7.5CVSS7.5AI score
SaveExploits0References2
NVD
NVD
•added 2021/11/08 3:15 p.m.•63 views

CVE-2021-39182

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

7.5CVSS0.00562EPSS
SaveExploits1References2
Prion
Prion
•added 2021/11/08 3:15 p.m.•26 views

Code injection

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

5CVSS7.5AI score0.00562EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/11/08 3:15 p.m.•11 views

CVE-2021-39182

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

7.5CVSS5.9AI score0.00562EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/11/08 2:15 p.m.•71 views

CVE-2021-39182 Use of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

7.5CVSS7.7AI score0.00562EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2021/10/15 11:30 a.m.•39 views

Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicor...

7AI score
SaveExploits0References10
Fedora
Fedora
•added 2021/09/24 8:40 p.m.•37 views

[SECURITY] Fedora 35 Update: python-pycares-4.0.0-5.fc35

pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously...

6.8CVSS2.2AI score0.02814EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2021/09/08 7:26 p.m.•18 views

python-urllib3: ReDoS in the parsing of authority part of URL

A flaw was found in python-urllib3. When provided with a URL containing many @ characters in the authority component, the authority's regular expression exhibits catastrophic backtracking. This flaw causes a denial of service if a URL is passed as a parameter or redirected via an HTTP redirect. T...

7.5CVSS7.3AI score0.03273EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/07/15 12:00 a.m.•26 views

The vulnerability of the python/arfile.cc, python/tag.cc, and python/tarfile.cc files from the Python package installation module APT lies in the fact that resources are not released after their useful life has ended. This allows a perpetrator to cause service failures.

The vulnerability of the python/arfile.cc, python/tag.cc, and python/tarfile.cc files in the Python package installation module APT is related to the lack of resource release after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

2.8CVSS5.3AI score0.00395EPSS
SaveExploits0References11Affected Software4
RedHat Linux
RedHat Linux
•added 2021/06/01 1:23 p.m.•19 views

ansible: basic.py no_log with fallback option

A flaw was found in the Ansible Engine, where sensitive info is not masked by default and is not protected by the nolog feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to...

7.5CVSS7.1AI score0.0206EPSS
SaveExploits0References5
OSV
OSV
•added 2021/04/29 4:15 p.m.•16 views

AZL-6304 CVE-2021-20228 affecting package ansible for versions less than 2.12.1-1

A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the nolog feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability...

7.5CVSS7.1AI score0.0206EPSS
SaveExploits0References1
ALT Linux
ALT Linux
•added 2021/03/22 12:00 a.m.•118 views

Security fix for the ALT Linux 9 package python-module-yaml version 5.4.1-alt0.p9

5.4.1-alt0.p9 built March 22, 2021 Andrey Cherepanov in task 267990 --- March 18, 2021 Andrey Cherepanov - Backport version 5.4.x to p9 branch fixes CVE-2020-1747...

10CVSS7.2AI score0.05442EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2021/01/29 12:00 a.m.•48 views

CentOS 8 : python27:2.7 (CESA-2019:3335)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3335 advisory. - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service CVE-2019-11236 - python-urllib3...

9.8CVSS7.2AI score0.17528EPSS
SaveExploits6References7
Tenable Nessus
Tenable Nessus
•added 2020/07/01 12:00 a.m.•35 views

EulerOS Virtualization 3.0.6.0 : numpy (EulerOS-SA-2020-1730)

According to the version of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attacker...

9.8CVSS8.5AI score0.17528EPSS
SaveExploits2References2
ALT Linux
ALT Linux
•added 2020/04/17 12:00 a.m.•132 views

Security fix for the ALT Linux 9 package python-module-psutil version 5.7.0-alt1

5.7.0-alt1 built April 17, 2020 Anton Midyukov in task 244280 --- April 12, 2020 Vitaly Lipatov - new version 5.7.0 with rpmrb script ALT bug 38347 - CVE-2019-18874...

5CVSS1AI score0.03522EPSS
SaveExploits0
Prion
Prion
•added 2020/02/12 2:15 a.m.•25 views

Format string

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

5CVSS8.1AI score0.1059EPSS
SaveExploits1References8Affected Software2
Debian CVE
Debian CVE
•added 2020/02/12 1:30 a.m.•55 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8.1AI score0.07247EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/02/12 1:30 a.m.•44 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

8AI score0.07247EPSS
SaveExploits0References8
Rows per page
Query Builder