Lucene search
+L

8241 matches found

OSV
OSV
added 2022/09/19 3:13 p.m.16 views

CVE-2022-40812

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
CVE
CVE
added 2022/09/19 3:13 p.m.61 views

CVE-2022-40812

The CVE-2022-40812 entry concerns the PyPI package d8s-pdfs for Python. Affected component: the package as distributed in version 0.1.0, with a backdoor introduced by a third party — the democritus-file-system package — enabling potential code execution. Multiple sources (NVD, Red Hat, Veracode, ...

9.8CVSS9.4AI score0.01063EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 3:11 p.m.24 views

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.7AI score0.01093EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/19 3:11 p.m.59 views

CVE-2022-40431

The CVE-2022-40431 incident concerns the Python package d8s-pdfs for PyPI, version 0.1.0, which reportedly included a backdoor inserted by a third party via the democritus-networking package. Public sources describe this as a potential code execution vulnerability with a network-based attack surf...

9.8CVSS9.4AI score0.01093EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/09/19 3:11 p.m.24 views

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2022/09/19 3:08 p.m.19 views

CVE-2022-40429

The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
CVE
CVE
added 2022/09/19 3:08 p.m.66 views

CVE-2022-40429

CVE-2022-40429 affects the Python package d8s-ip-addresses (version 0.1.0) distributed on PyPI. A third-party backdoor named democritus-networking was inserted, enabling potential code execution. Descriptions across multiple sources confirm the root cause is a tainted package supply chain, leadin...

9.8CVSS9.4AI score0.01093EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 3:08 p.m.41 views

CVE-2022-40429

The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.7AI score0.01093EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/19 3:06 p.m.44 views

CVE-2022-40810

CVE-2022-40810 affects the Python package d8s-ip-addresses distributed on PyPI, where a third-party backdoor (democritus-hypothesis, version 0.1.0) enabled potential remote code execution. Exploitation status is not provided in the sources. The CVSS base metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

9.8CVSS9.4AI score0.01063EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 3:06 p.m.35 views

CVE-2022-40810

The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.7AI score0.01063EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/19 3:03 p.m.60 views

CVE-2022-40809

CVE-2022-40809 affects the Python package range “d8s-dicts” distributed on PyPI, with the affected version 0.1.0. Multiple sources describe a backdoor inserted by a third party in the democritus-hypothesis package, enabling potential remote code execution. The CVE record and related advisories co...

9.8CVSS9.4AI score0.01063EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/09/19 3:03 p.m.18 views

CVE-2022-40809

The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/09/19 3:03 p.m.37 views

CVE-2022-40809

The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.7AI score0.01063EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/19 3:00 p.m.20 views

CVE-2022-40808

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
CVE
CVE
added 2022/09/19 3:00 p.m.60 views

CVE-2022-40808

CVE-2022-40808 affects the Python package d8s-dates distributed on PyPI, where a third-party backdoor (democritus-hypothesis) in version 0.1.0 enables potential remote code execution. Affected component is the d8s-dates package as shipped; root cause is insertion of a code-execution backdoor by a...

9.8CVSS9.4AI score0.01093EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 3:00 p.m.31 views

CVE-2022-40808

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.7AI score0.01093EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/19 2:55 p.m.19 views

CVE-2022-40807

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
CVE
CVE
added 2022/09/19 2:55 p.m.50 views

CVE-2022-40807

Summary (CVE-2022-40807) The PyPI package set for d8s-domains (Python) includes a backdoor insertion, via the third‑party democritus-hypothesis package, in version 0.1.0. The entry describes a potential code-execution backdoor with a high impact (CVSS v3.1: 9.8, CRITICAL; network attack vector, n...

9.8CVSS9.4AI score0.01093EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 2:55 p.m.31 views

CVE-2022-40807

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.7AI score0.01093EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/19 2:54 p.m.55 views

CVE-2022-40427

CVE-2022-40427 concerns the Python package d8s-domains distributed on PyPI. The vulnerability arises from a backdoor (the package democritus-networking ) inserted by a third party in version 0.1.0 , enabling potential remote code execution. Reported in multiple feeds (NVD, Red Hat, OSV, Veracode,...

9.8CVSS9.4AI score0.01093EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder