Lucene search
+L

73 matches found

OSV
OSV
added 2026/01/20 10:15 p.m.8 views

AZL-75050 CVE-2025-15367 affecting package python3 3.9.19-19

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS7.4AI score0.00315EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/20 10:15 p.m.8 views

AZL-75038 CVE-2025-15367 affecting package python3 3.12.9-9

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS5.8AI score0.00315EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/20 10:15 p.m.7 views

CVE-2025-15367

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS0.00315EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/20 10:15 p.m.2 views

DEBIAN-CVE-2025-15367

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS7.4AI score0.00315EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/01/20 10:15 p.m.5 views

CVE-2025-15367

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS7.1AI score0.00315EPSS
SaveExploits0References8
OSV
OSV
added 2026/01/20 10:15 p.m.11 views

UBUNTU-CVE-2025-15367

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS7.2AI score0.00315EPSS
SaveExploits0References9
CVE
CVE
added 2026/01/20 9:47 p.m.48 views

CVE-2025-15367

CVE-2025-15367 concerns the Python poplib module. The vulnerability allows additional commands to be injected via newlines when a user-controlled command is passed, with mitigation noting that control characters are rejected. Connected advisories from multiple distros (Ubuntu USN-8018-1, AlmaLinu...

5.9CVSS5.4AI score0.00315EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/20 9:47 p.m.96 views

CVE-2025-15367 POP3 command injection in user-controlled commands

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS0.00315EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/20 9:47 p.m.7 views

PSF-2026-4

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS5.5AI score0.00315EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/20 9:47 p.m.4 views

CVE-2025-15367 POP3 command injection in user-controlled commands

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS5.4AI score0.00315EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/20 9:47 p.m.5 views

CVE-2025-15367 POP3 command injection in user-controlled commands

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS6.8AI score0.00315EPSS
SaveExploits0References7
Snyk
Snyk
added 2026/01/20 9:47 p.m.3 views

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the poplib module. An attacker can manipulate mailbox state, such as deleting emails or reading metadata and specific email content, by injecting additional POP3 commands through malicious input containin...

7.1CVSS6AI score0.00315EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/01/20 9:47 p.m.6 views

CVE-2025-15367

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS7.4AI score0.00315EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/01/20 9:47 p.m.10 views

CVE-2025-15367

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS5.3AI score0.00315EPSS
SaveExploits0References5
FreeBSD
FreeBSD
added 2026/01/20 12:0 a.m.21 views

Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines

Python Software Foundation Security Developer reports: The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters...

5.9CVSS7.1AI score0.00315EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.6 views

PT-2026-3664

Name of the Vulnerable Software and Affected Versions poplib affected versions not specified Description The poplib module is susceptible to command injection when processing user-supplied commands. Specifically, the module can be exploited to inject additional commands through the use of newline...

7.5CVSS5.8AI score0.00315EPSS
SaveExploits0References154
F5 Networks
F5 Networks
added 2023/02/21 6:35 p.m.49 views

K53192206: Python and Jython vulnerability CVE-2013-1752

Security Advisory Description REJECT Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service memory consumption via a long string, related to 1 httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; 2 ftplib - fixed in 2.7.6, 2.6.9, 3.3....

8.1AI score
SaveExploits1Affected Software15
SUSE CVE
SUSE CVE
added 2023/02/15 5:40 a.m.5 views

SUSE CVE-2013-1752

Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service memory consumption via a long string, related to 1 httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; 2 ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; 3 imaplib - not yet fixed in 2.7.x...

5.3CVSS8.4AI score
SaveExploits1References36
CVE
CVE
added 2019/06/03 7:4 p.m.193 views

CVE-2013-1752

CVE-2013-1752 is a denial-of-service in Python readline usage within several network protocol modules (httplib, ftplib, imaplib, nntplib, poplib, smtplib). Remote attackers could exhaust memory via a long readline input. Connected advisories confirm fixes in various module releases: httplib fixed...

7.1AI score
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.33 views

Fedora 28 : python34 (2018-c3a2174314)

Security update to 3.4.9 with fix for CVE-2018-1060: difflib and poplib catastrophic backtracking. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

7.5CVSS6.3AI score0.05287EPSS
SaveExploits1References2
Rows per page
Query Builder