Lucene search
+L

1262 matches found

CBLMariner
CBLMariner
added 2021/11/06 12:29 a.m.17 views

CVE-2021-42771 affecting package babel 2.6.0-9

CVE-2021-42771 affecting package babel 2.6.0-9. A patched version of the package is available...

7.8CVSS8AI score0.0077EPSS
SaveExploits1
Photon
Photon
added 2021/11/04 12:00 a.m.43 views

Important Photon OS Security Update - PHSA-2021-4.0-0123

Updates of 'python3-babel' packages of Photon OS have been released...

7.8CVSS1.7AI score0.0077EPSS
SaveExploits1
Photon
Photon
added 2021/11/03 12:00 a.m.50 views

Important Photon OS Security Update - PHSA-2021-0123

Updates of 'python3-babel' packages of Photon OS have been released...

7.2CVSS1.7AI score0.0077EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2021/10/26 7:00 a.m.7 views

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal leading to code execution.

...

7.8CVSS8.7AI score0.0077EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/10/25 12:00 a.m.30 views

EulerOS 2.0 SP3 : babel (EulerOS-SA-2021-2571)

According to the versions of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-20095 Note that...

9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2021/10/22 5:14 p.m.60 views

CVE-2021-42771

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

7.8CVSS4.4AI score0.0077EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/10/22 12:00 a.m.30 views

Debian: Security Advisory (DLA-2790-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.0077EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/10/21 5:49 p.m.135 views

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS6.5AI score0.0077EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2021/10/21 5:49 p.m.12 views

GHSA-H4M5-QPFP-3MPV Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

8.7CVSS7AI score0.0077EPSS
SaveExploits1References10
Debian
Debian
added 2021/10/21 9:56 a.m.40 views

[SECURITY] [DLA 2790-1] python-babel security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2790-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 21, 2021 https://wiki.debian.org/LTS -...

7.8CVSS8.1AI score0.0077EPSS
SaveExploits1
Veracode
Veracode
added 2021/10/21 4:31 a.m.38 views

Directory Traversal

babel is vulnerable to directory traversal. The library does not clean the locale identifiers properly before loading from file, allowing a malicious user to load arbitrary locale .dat files...

7.8CVSS4.2AI score0.0077EPSS
SaveExploits1References6Affected Software6
OSV
OSV
added 2021/10/21 12:00 a.m.34 views

DLA-2790-1 python-babel - security update

Bulletin has no description...

7.8CVSS7.8AI score0.0077EPSS
SaveExploits1
OSV
OSV
added 2021/10/20 9:15 p.m.7 views

ALPINE-CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.7AI score0.0077EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/20 9:15 p.m.10 views

AZL-6325 CVE-2021-42771 affecting package babel for versions less than 2.9.1-1

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.2AI score0.0077EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/20 9:15 p.m.29 views

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.4AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/10/20 9:15 p.m.9 views

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.1AI score0.0077EPSS
SaveExploits1References6
PyPA
PyPA
added 2021/10/20 9:15 p.m.8 views

PYSEC-2021-421

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS9.1AI score0.0077EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/10/20 9:15 p.m.10 views

UBUNTU-CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.1AI score0.0077EPSS
SaveExploits1References6
OSV
OSV
added 2021/10/20 9:15 p.m.18 views

PYSEC-2021-421

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7AI score0.0077EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2021/10/20 8:05 p.m.53 views

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS8.1AI score0.0077EPSS
SaveExploits1
Rows per page
Query Builder