Lucene search
+L

927 matches found

Amazon
Amazon
added 2024/12/12 12:0 a.m.3 views

Medium: python3.11

Issue Overview: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which...

8.7CVSS6.9AI score0.02527EPSS
SaveExploits1
SUSE Linux
SUSE Linux
added 2024/12/11 11:24 a.m.2 views

Security update for python312

This update for python312 fixes the following issues: CVE-2024-12254: Fixed unbounded memory buffering in SelectorSocketTransport.writelines bsc1234290 Other fixes: - Updated to version 3.12.8 - Remove -IVendor/ from python-config bsc1231795 Patch Instructions: To install this SUSE update use the...

8.7CVSS8.1AI score0.0188EPSS
SaveExploits0References6
OSV
OSV
added 2024/12/06 3:23 p.m.6 views

OESA-2024-2513 ansible security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

6.3CVSS6.6AI score0.00271EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/06 3:23 p.m.3 views

OESA-2024-2512 ansible security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

6.3CVSS6.6AI score0.00271EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/06 3:23 p.m.8 views

OESA-2024-2510 ansible security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

6.3CVSS6.6AI score0.00271EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2024/12/04 11:2 a.m.5 views

Security update for python36

This update for python36 fixes the following issues: CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. bsc1233307 Bug fixes: Remove -IVendor/ from python-config. bsc1231795 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

6.3CVSS7.4AI score0.0067EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2024/12/02 12:21 p.m.7 views

Security update for python39

This update for python39 fixes the following issues: CVE-2024-11168: Improper validation of IPv6 and IPvFuture addresses bsc1233307. Bug fixes: Remove -IVendor/ from python-config bsc1231795. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

6.3CVSS6.7AI score0.0067EPSS
SaveExploits0References6
AstraLinux
AstraLinux
added 2024/11/23 3:4 a.m.8 views

Astra Linux – Vulnerability in Python 3.11

There is a medium-severity vulnerability affecting CPython. Regular expressions that allow excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS through specifically crafted tar archives...

7.5CVSS6.7AI score0.02203EPSS
SaveExploits2References3
OSV
OSV
added 2024/11/19 1:22 p.m.8 views

USN-7116-1 python3.10, python3.12, python3.8 vulnerability

It was discovered that Python incorrectly handled quoting path names when using the venv module. A local attacker able to control virtual environments could possibly use this issue to execute arbitrary code when the virtual environment is activated...

7.8CVSS7.2AI score0.00647EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2024/11/18 1:29 p.m.10 views

Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path...

7.5CVSS7.8AI score0.02303EPSS
SaveExploits3References62
SUSE Linux
SUSE Linux
added 2024/11/18 1:29 p.m.12 views

Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path...

7.5CVSS7.8AI score0.02303EPSS
SaveExploits3References62
SUSE Linux
SUSE Linux
added 2024/11/18 1:25 p.m.11 views

Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path...

7.5CVSS7.7AI score0.02303EPSS
SaveExploits3References66
SUSE Linux
SUSE Linux
added 2024/11/18 1:25 p.m.4 views

Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path...

7.5CVSS7.8AI score0.02303EPSS
SaveExploits3References66
Amazon
Amazon
added 2024/11/14 12:0 a.m.2 views

Important: python3.11

Issue Overview: There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives. CVE-2024-6232 Affected Packages: python3.11 Issue Correction: Ru...

7.5CVSS6.9AI score0.02203EPSS
SaveExploits2
SUSE Linux
SUSE Linux
added 2024/11/08 3:25 p.m.3 views

Security update for python311

This update for python311 fixes the following issues: CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: Drop .pyc files from docdir for reproducible builds bsc1230906. Patch Instructions: To install this SUSE update use the SUSE recommended...

6.5CVSS7.5AI score0.00647EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2024/11/07 3:57 p.m.4 views

Security update for python3

This update for python3 fixes the following issues: CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: Drop .pyc files from docdir for reproducible builds bsc1230906. Patch Instructions: To install this SUSE update use the SUSE recommended...

6.5CVSS7.2AI score0.00647EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2024/11/06 3:33 p.m.5 views

Security update for python36

This update for python36 fixes the following issues: Security fixes: CVE-2024-9287: properly quote path names provided when creating a virtual environment bsc1232241 Other fixes: Drop .pyc files from docdir for reproducible builds bsc1230906 Patch Instructions: To install this SUSE update use the...

6.5CVSS7.3AI score0.00647EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2024/11/06 10:14 a.m.5 views

Security update for python310

This update for python310 fixes the following issues: CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: Drop .pyc files from docdir for reproducible builds bsc1230906. Patch Instructions: To install this SUSE update use the SUSE recommended...

6.5CVSS7.5AI score0.00647EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2024/10/28 3:33 a.m.4 views

Security update for python3

This update for python3 fixes the following issues: Security fixes: CVE-2024-9287: properly quote path names provided when creating a virtual environment bsc1232241 Other fixes: Drop .pyc files from docdir for reproducible builds bsc1230906 Patch Instructions: To install this SUSE update use the...

6.5CVSS7.3AI score0.00647EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2024/10/26 1:1 a.m.216 views

Exploit for CVE-2024-39205

CVE-2024-39205-Pyload-RCE Pyload RCE with js2py sandbox escape...

9.8CVSS6.8AI score0.16513EPSS
SaveExploits22
Rows per page
Query Builder