Lucene search
K

238 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:39 a.m.6 views

CVE-2019-17268

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

9.8CVSS6.9AI score0.00646EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/22 12:0 a.m.6 views

CVE-2023-24107

hourofcodepython2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package requirements.txt. This vulnerability allows attackers to access sensitive user information and execute arbitrary code...

9.9AI score0.00452EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/02/22 12:0 a.m.11 views

CVE-2023-24108

MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package requirements.txt. This vulnerability allows attackers to access sensitive user information and execute arbitrary code...

10AI score0.00565EPSS
Exploits1References3
OSV
OSV
added 2022/12/14 3:15 p.m.1 views

CVE-2022-46997

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score0.00749EPSS
Exploits1References3
OSV
OSV
added 2022/12/14 3:15 p.m.1 views

CVE-2022-46996

vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score
Exploits0References3
OSV
OSV
added 2022/12/14 3:15 p.m.4 views

CVE-2022-46609

Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well ...

9.8CVSS7.7AI score
Exploits0References7
Vulnrichment
Vulnrichment
added 2022/12/14 12:0 a.m.4 views

CVE-2022-46609

Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well ...

8AI score0.00872EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/12/14 12:0 a.m.4 views

PT-2022-27929 · Unknown · Python3-Restfulapi

Name of the Vulnerable Software and Affected Versions: Python3-RESTfulAPI versions d9907f14e9e25dcdb54f5b22252b0e9452e3970e through e772e0beee284c50946e94c54a1d43071ca78b74 Description: The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate...

9.8CVSS9.5AI score0.00872EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2022/12/14 12:0 a.m.4 views

CVE-2022-46997

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8AI score0.00749EPSS
Exploits1References3
NVD
NVD
added 2022/11/07 3:15 p.m.6 views

CVE-2022-44050

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-json package. The affected version of d8s-htm is 0.1.0...

9.8CVSS0.00532EPSS
Exploits0References3
NVD
NVD
added 2022/11/07 3:15 p.m.10 views

CVE-2022-43303

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

9.8CVSS0.00532EPSS
Exploits0References3
PyPA
PyPA
added 2022/11/07 3:15 p.m.5 views

PYSEC-2022-43084

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.6AI score0.00532EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/11/07 3:15 p.m.2 views

PYSEC-2022-43090

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0...

8.8CVSS7.7AI score
Exploits0References3
OSV
OSV
added 2022/11/07 3:15 p.m.1 views

PYSEC-2022-43093

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.7AI score
Exploits0References3
OSV
OSV
added 2022/11/07 3:15 p.m.1 views

PYSEC-2022-43085

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.7AI score
Exploits0References3
PyPA
PyPA
added 2022/11/07 3:15 p.m.5 views

PYSEC-2022-43126

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.6AI score0.00532EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/11/07 3:15 p.m.2 views

PYSEC-2022-43094

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.7AI score
Exploits0References3
OSV
OSV
added 2022/11/07 3:15 p.m.1 views

PYSEC-2022-43130

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.7AI score
Exploits0References3
OSV
OSV
added 2022/11/07 3:15 p.m.1 views

PYSEC-2022-43097

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.7AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2022/11/07 12:0 a.m.3 views

CVE-2022-43304

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

9.7AI score0.00532EPSS
Exploits0References3
Rows per page
Query Builder