Lucene search
+L

5 matches found

osv_root
osv_root
•added 2026/09/11 9:07 a.m.•20 views

ROOT-OS-DEBIAN-11-CVE-2026-8328 CVE-2026-8328 in python3.9 - Patched by Root

Root has patched CVE-2026-8328 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

5.9CVSS5.7AI score0.00457EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/28 12:00 a.m.•17 views

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:3245-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3245-1 advisory. - CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding bsc1264962...

7.8CVSS6.4AI score0.0075EPSS
SaveExploits0References10
osv_debian
osv_debian
•added 2026/05/13 9:16 p.m.•19 views

DEBIAN-CVE-2026-8328

The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...

5.9CVSS6AI score0.00457EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/05/13 9:16 p.m.•28 views

UBUNTU-CVE-2026-8328

The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...

5.9CVSS6AI score0.00457EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/05/13 8:14 p.m.•24 views

CVE-2026-8328

The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...

5.9CVSS6AI score0.00457EPSS
SaveExploits0
Rows per page
Query Builder