Lucene search
+L

21 matches found

vulnersOsv
vulnersOsv
•added 2026/04/24 5:16 p.m.•3 views

exchangerates (>=0.3.0, <=0.3.1), lolcomicgrabber (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2026-41066 via lxml (4.4.0)

lxml PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - exchangerates =0.3.0, =0.0.1, =0.0.1b1, =0.1.0, =0.2.1 Source cves: CVE-2026-41066 Source advisory: OSV:PYSEC-2026-87...

7.5CVSS5.8AI score0.00324EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/04/21 8:38 p.m.•3 views

exchangerates (>=0.3.0, <=0.3.1), lolcomicgrabber (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2026-41066 via lxml (4.4.0)

lxml PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - exchangerates =0.3.0, =0.0.1, =0.0.1b1, =0.1.0, =0.2.1 Source cves: CVE-2026-41066 Source advisory: OSV:GHSA-VFMQ-68HX-4JFW...

7.5CVSS5.8AI score0.00324EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-0121

Malware in sbrugna...

9.1CVSS8.4AI score0.02306EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2016-8640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw databa...

9.1CVSS8.1AI score0.02306EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2018/08/15 8:02 p.m.•38 views

SQL Injection in pycsw

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS3.7AI score0.02306EPSS
SaveExploits0References9Affected Software1
osv_ghsa
osv_ghsa
•added 2018/08/15 8:02 p.m.•55 views

GHSA-HG4C-RGVM-964G SQL Injection in pycsw

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.3CVSS9.3AI score0.02306EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2018/08/01 6:29 p.m.•21 views

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS7.2AI score0.02306EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2018/08/01 6:29 p.m.•16 views

UBUNTU-CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS7.3AI score0.02306EPSS
SaveExploits0References4
Prion
Prion
•added 2018/08/01 6:29 p.m.•18 views

Sql injection

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

7.5CVSS7.9AI score0.02306EPSS
SaveExploits0References4Affected Software1
osv_debian
osv_debian
•added 2018/08/01 6:29 p.m.•23 views

DEBIAN-CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS7.9AI score0.02306EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/08/01 6:29 p.m.•21 views

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS9.3AI score
SaveExploits0References4
NVD
NVD
•added 2018/08/01 6:29 p.m.•24 views

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS9.4AI score0.02306EPSS
SaveExploits0References4
PyPA
PyPA
•added 2018/08/01 6:29 p.m.•16 views

PYSEC-2018-98

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS7.9AI score0.02306EPSS
SaveExploits0References5Affected Software1
osv_pysec
osv_pysec
•added 2018/08/01 6:29 p.m.•42 views

PYSEC-2018-98

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS3.7AI score0.02306EPSS
SaveExploits0References5
Mend
Mend
•added 2018/08/01 6:00 p.m.•5 views

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.3CVSS0.02306EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2018/08/01 6:00 p.m.•32 views

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.4AI score0.02306EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2018/08/01 6:00 p.m.•46 views

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS9.5AI score0.02306EPSS
SaveExploits0
CVE
CVE
•added 2018/08/01 6:00 p.m.•95 views

CVE-2016-8640

PyCSW is vulnerable to a SQL injection in all versions before 2.0.2, 1.10.5, and 1.8.6, allowing read/exfiltration of data from any table the DB user can access; on PostgreSQL it may also enable updates/inserts/deletes to covered tables. The vulnerability is confirmed across multiple sources (NVD...

9.1CVSS9.3AI score0.02306EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2018/08/01 12:00 a.m.•5 views

PT-2018-5042

Name of the Vulnerable Software and Affected Versions pycsw versions prior to 2.0.2 pycsw versions prior to 1.10.5 pycsw versions prior to 1.8.6 Description A SQL injection issue affects the pycsw database, allowing unauthorized access to read and extract data from any table that the database use...

9.3CVSS0.02306EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/01 12:00 a.m.•5 views

CVE-2016-8640: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

9.1CVSS7.9AI score0.02306EPSS
SaveExploits0References3
Rows per page
Query Builder