Lucene search
+L

2434 matches found

OSV
OSV
added 2024/10/25 5:17 p.m.25 views

RLSA-2024:8447 Moderate: python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

7.5CVSS8.1AI score0.02203EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
added 2024/10/24 12:9 p.m.27 views

Moderate: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

7.5CVSS6.8AI score0.02203EPSS
SaveExploits2References2
Fedora
Fedora
added 2024/10/24 1:28 a.m.14 views

[SECURITY] Fedora 40 Update: rust-pyo3-0.22.4-1.fc40

Bindings to Python interpreter...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2024/10/24 1:20 a.m.14 views

[SECURITY] Fedora 39 Update: rust-pyo3-0.22.4-1.fc39

Bindings to Python interpreter...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/10/24 12:0 a.m.16 views

ALSA-2024:8447 Moderate: python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

7.5CVSS8.1AI score0.02203EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2024/10/23 12:0 a.m.12 views

Cisco NX-OS Protection Mechanism Failure (CVE-2024-20286)

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of...

8.8CVSS6.2AI score0.00194EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/23 12:0 a.m.21 views

Cisco NX-OS Improper Isolation or Compartmentalization (CVE-2024-20285)

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of...

8.8CVSS6.2AI score0.00194EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:0 a.m.19 views

Cisco NX-OS Protection Mechanism Failure (CVE-2024-20284)

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. The vulnerability is due to insufficient validation of...

8.8CVSS6.2AI score0.00194EPSS
SaveExploits0References3
Redos
Redos
added 2024/10/17 12:0 a.m.309 views

ROS-20241017-08

Vulnerability in the 'http.cookies' standard library module of the Python programming language interpreter CPython is related to inefficient regular expression complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.5CVSS6.7AI score0.02284EPSS
SaveExploits1
Redos
Redos
added 2024/10/15 12:0 a.m.24 views

ROS-20241015-11

A vulnerability in the PHP programming language interpreter exists due to a failure to neutralize special elements. special elements. Exploitation of the vulnerability could allow an attacker acting remotely to Affect the confidentiality, integrity, and availability of protected information...

8.8CVSS7.5AI score0.03662EPSS
SaveExploits71
Redos
Redos
added 2024/10/15 12:0 a.m.16 views

ROS-20241015-14

A vulnerability in the PHP programming language interpreter exists due to a failure to take measures to neutralize the special elements. Exploitation of the vulnerability could allow an attacker acting remotely to Affect the confidentiality, integrity, and availability of protected information...

8.8CVSS7.8AI score0.03662EPSS
SaveExploits71
F5 Networks
F5 Networks
added 2024/10/07 3:15 a.m.38 views

K000141355: Multiple PHP vulnerabilities

Security Advisory Description CVE-2016-4342 ext/phar/pharobject.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact v...

8.8CVSS9.2AI score0.13314EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2024/10/02 12:0 a.m.8 views

The vulnerability of the PHP programming language interpreter, which allows attackers to circumvent existing security restrictions

The vulnerability of the PHP programming language interpreter is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and manipulate the PHP-FPM logs...

10CVSS6.5AI score0.00483EPSS
SaveExploits1References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/10/02 12:0 a.m.10 views

The vulnerability of the PHP programming language interpreter arises from the failure to address the issue of eliminating special elements that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the PHP programming language interpreter exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.8AI score0.03662EPSS
SaveExploits68References9Affected Software3
Gentoo Linux
Gentoo Linux
added 2024/09/22 12:0 a.m.26 views

GPL Ghostscript: Multiple Vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workarou...

8.8CVSS7.7AI score0.27974EPSS
SaveExploits6
Fedora
Fedora
added 2024/09/20 12:44 a.m.26 views

[SECURITY] Fedora 39 Update: python3.11-3.11.10-1.fc39

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

8.7CVSS8.9AI score0.02527EPSS
SaveExploits4
Fedora
Fedora
added 2024/09/16 12:15 a.m.21 views

[SECURITY] Fedora 41 Update: python3-docs-3.13.0~rc2-1.fc41

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

8.7CVSS7.7AI score0.02203EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2024/09/16 12:0 a.m.9 views

The vulnerability of the Python interpreter of the Cisco NX-OS operating system for Cisco Nexus switches allows a hacker to execute arbitrary commands.

The vulnerability of the Python interpreter in the Cisco NX-OS operating system of Cisco Nexus switches is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to execute arbitrary commands in the basic operating system...

5.3CVSS5.9AI score0.00194EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.10 views

The vulnerability of the Python interpreter of the Cisco NX-OS operating system for Cisco Nexus switches allows a hacker to execute arbitrary commands.

The vulnerability of the Python interpreter in the Cisco NX-OS operating system of Cisco Nexus switches is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands in the underlying operating system...

5.3CVSS5.9AI score0.00194EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.13 views

The vulnerability of the Erlang programming language interpreter, related to the exposure of information through discrepancies, allows attackers to gain access to confidential data.

The vulnerability of the Erlang programming language interpreter is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

5.9CVSS6.5AI score0.22098EPSS
SaveExploits0References14Affected Software3
Rows per page
Query Builder