1005 matches found
Magento-RCE
Magento RCE Exploit This repository contains an improved and...
SUSE-EL-9-CLIENT-TOOLS-2024-1525 Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master bsc1219430 - CVE-2024-22232: Prevent directory traversal attacks in the master's servefile method bsc1219431 - Convert oscap output to UTF-8 -...
Medium: python3.9
Issue Overview: An issue was found in the CPython zipfile module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to "quoted-overlap" zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed...
PT-2024-23583 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Dashing Diademata versions ROS VERSION is 2 and ROS PYTHON VERSION is 3 Description: An issue in ROS2 allows remote attackers to execute arbitrary code and escalate privileges. Recommendations: For ROS2 Dashing Diademata versions ROS...
PT-2024-23572 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: A issue was discovered that allows remote attackers to cause a denial of service DoS in the ROS2 nodes. Recommendations: For ROS2 Galactic Geochelone versio...
PT-2024-23566 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An insecure logging vulnerability has been identified, allowing attackers to access sensitive information via inadequate security measures within the logging...
PT-2024-23547 · Ros · Ros
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia versions ROS VERSION 1 and ROS PYTHON VERSION 3 Description: The issue allows attackers to execute arbitrary code, escalate privileges, and obtain sensitive information. It is described as a Shell...
CLSA-2024-1711648611 python3.9: Fix of CVE-2023-27043
CVE-2023-27043: reject malformed addresses in email.parseaddr...
PT-2024-22900 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3 Description: An unauthorized access issue has been discovered, potentially allowing a malicious user to gain unauthorized access to multiple ROS2 nodes remotely...
CLSA-2024-1710437461 python3: Fix of CVE-2022-48564
CVE-2022-48564: Improve validation of Plist files that prevent DoS...
SUSE-SU-2024:0850-1 Security update for python3
This update for python3 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory bsc1219666...
USN-6513-2 python3.8, python3.10, python3.11 vulnerability
USN-6513-1 fixed vulnerabilities in Python. This update provides the corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. Original advisory details: It was discovered that Python incorrectly handled certain plist files. If a user or an automated system were tricked into...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0139
Updates of 'python3' packages of Photon OS have been released...
python: file path truncation at \0 characters
Python 3.11 os.path.normpath function is vulnerable to path truncation if a null byte is inserted in the middle of passed path. This may result in bypass of allow lists if implemented before the verification of the path...
CLSA-2023-1697741309 python3: Fix of CVE-2022-48560
CVE-2022-48560: fix posible crash in heapq with custom comparison operators...
CLSA-2023-1697739575 python3: Fix of 4 CVEs
CVE-2021-3737: Fix http client infinite line reading DoS after a HTTP 100 Continue - CVE-2021-28861: Fix an open redirection vulnerability in http.server - CVE-2022-0391: Make urllib.parse sanitize urls containing ASCII newline and tabs - CVE-2022-45061: Fix quadratic time idna decoding...
USN-6400-1 python2.7, python3.5 vulnerability
It was discovered that Python did not properly provide constant-time processing for a crypto operation. An attacker could possibly use this issue to perform a timing attack and recover sensitive information...
SUSE-SU-2023:3804-1 Security update for python3
This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets bsc1214692...
Medium: python38
Issue Overview: A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16,...