Lucene search
+L

283 matches found

OSV
OSV
added 2022/09/07 1:15 p.m.4 views

UBUNTU-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.01718EPSS
SaveExploits1References9
PyPA
PyPA
added 2022/09/07 1:15 p.m.9 views

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7AI score0.01718EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2022/09/07 12:0 a.m.38 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.7AI score0.01718EPSS
SaveExploits1References6
OSV
OSV
added 2022/09/07 12:0 a.m.44 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

5.7AI score
SaveExploits0References9
CNNVD
CNNVD
added 2022/09/07 12:0 a.m.6 views

SQLAlchemy 安全漏洞

SQLAlchemy is a Python based open source database ORM software. The product mainly provides SQL toolkit and object-relational mapping tools. A security vulnerability exists in SQLAlchemy mako versions prior to 1.2.2, which stems from vulnerability to regular expression denial of service attacks...

7.5CVSS7.6AI score0.01718EPSS
SaveExploits1References17
Debian CVE
Debian CVE
added 2022/09/07 12:0 a.m.43 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.6AI score0.01718EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2022/09/07 12:0 a.m.61 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.5AI score0.01718EPSS
SaveExploits1
CVE
CVE
added 2022/09/07 12:0 a.m.305 views

CVE-2022-40023

CVE-2022-40023 affects the Python package mako (and related plugins) with a Regular expression Denial of Service in the Lexer parser when using mako before version 1.2.2. Connected advisories consistently state the issue is fixed in newer mako/python-mako packages across distributions (e.g., Debi...

7.5CVSS7.2AI score0.01718EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:49 a.m.29 views

SQLAlchemy vulnerable to SQL injection

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset keyword to the select function, or unspecified vectors to the 3 select.limit or 4 select.offset function...

7.5CVSS8.7AI score0.02886EPSS
SaveExploits2References13Affected Software1
OSV
OSV
added 2022/05/14 3:49 a.m.3 views

GHSA-HFG2-WF6J-X53P SQLAlchemy vulnerable to SQL injection

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset keyword to the select function, or unspecified vectors to the 3 select.limit or 4 select.offset function...

9.8CVSS8.2AI score0.02886EPSS
SaveExploits2References13
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2019-0350)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.03525EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2021/11/07 12:0 a.m.24 views

Debian: Security Advisory (DLA-2811-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.03525EPSS
SaveExploits3References4
Debian
Debian
added 2021/11/06 10:27 p.m.45 views

[SECURITY] [DLA 2811-1] sqlalchemy security update

Debian LTS Advisory DLA-2811-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 06, 2021 https://wiki.debian.org/LTS Package : sqlalchemy Version : 1.0.15+ds1-1+deb9u1 CVE ID : CVE-2019-7164 CVE-2019-7548 Debian Bug : 922669 Two SQL injection vulnerabiliti...

9.8CVSS7.2AI score0.03525EPSS
SaveExploits3
OSV
OSV
added 2021/11/06 12:0 a.m.33 views

DLA-2811-1 sqlalchemy - security update

Bulletin has no description...

9.8CVSS8.8AI score0.03525EPSS
SaveExploits3
Kitploit
Kitploit
added 2021/10/11 11:30 a.m.29 views

BruteLoops - Protocol Agnostic Online Password Guessing API

A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces. See various Wiki sections for more information. A "modular" example is included with the library that demonstrates how to use this package. It's fully functional an...

7.3AI score
SaveExploits0References6
Hacker One
Hacker One
added 2021/08/02 5:42 p.m.132 views

GitHub Security Lab: [Python]: Add SqlAlchemy support for SQL injection query

This bug was reported directly to GitHub Security Lab...

0.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2019:2253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.03525EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2019:2253-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.03525EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2021/05/27 12:0 a.m.17 views

Fedora: Security Advisory for python-databases (FEDORA-2021-e7fabd81fb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00967EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/05 11:2 a.m.5 views

OESA-2021-1071 python-sqlalchemy security update

SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. It contains a powerful mapping layer that users can choose to work as automatically or as manually, determining relationships based on foreign keys or to bridge the gap between database...

9.8CVSS8.1AI score0.03525EPSS
SaveExploits2References2
Rows per page
Query Builder