995 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-48560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2022-48560 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2022-40897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageInd...
Linux Distros Unpatched Vulnerability : CVE-2013-7040
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the abili...
Linux Distros Unpatched Vulnerability : CVE-2019-9947
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a ur...
Linux Distros Unpatched Vulnerability : CVE-2019-9740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a ur...
PYSEC-2025-18
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package hosted, for example, on pypi.org or GitHub via pip.main. Because pip is not a restricted global, the model, when scanned with picklesca...
Malicious code in acloud-clients (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 89813876cca364b0dffda624005d527aa3c9f54ea7ce20af8186faf8f374ba6f This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
MAL-2025-191904 Malicious code in time-server-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8a160dff2a937ad50482cc2b8c8bcd1b7e7c37aefb584bd26515edfecdd4052f This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
MAL-2025-191905 Malicious code in time-service-checker (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 92ae5fc73fd7cc45d02ba02f6c3b667d155f681ba74262d66421edee5f19d237 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
GHSA-QXG5-MCMP-M3M9 vulnerabilities
Vulnerabilities for packages: python...
GHSA-PH84-RCJ2-FXXM vulnerabilities
Vulnerabilities for packages: python...
GHSA-MH6Q-V4MP-2CC7 vulnerabilities
Vulnerabilities for packages: python...
GHSA-Q98G-HXG3-268C vulnerabilities
Vulnerabilities for packages: python...
GHSA-MMM5-WGVP-WP8R vulnerabilities
Vulnerabilities for packages: python...
GHSA-QXG5-MCMP-M3M9 vulnerabilities
Vulnerabilities for packages: python...
Ubuntu: Security Advisory (USN-7280-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 41 Update: python3.10-3.10.16-5.fc41
Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...
CVE-2025-24357 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...
Critical Photon OS Security Update - PHSA-2025-4.0-0730
Updates of 'python3-tornado', 'python3-werkzeug', 'python-webob', 'python-werkzeug', 'python-tornado', 'python-requests', 'python3-webob', 'python3-gevent', 'python-virtualenv', 'python-gevent', 'python-jinja2' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2024-5.0-0434
Updates of 'python-werkzeug', 'python-gevent', 'python3-tornado', 'python-jinja2', 'python-tornado', 'python-virtualenv', 'python3-jinja2', 'python3', 'python-requests', 'python-webob', 'python3-webob', 'python3-werkzeug' packages of Photon OS have been released...