Lucene search
+L

36 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-16266

Malicious code in bioql PyPI...

5.5CVSS5.9AI score0.00247EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-16265

Malicious code in bioql PyPI...

7.8CVSS5.9AI score0.00337EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
•added 2025/05/28 7:17 a.m.•29 views

CVE-2025-5174

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

7.8CVSS4.8AI score0.00337EPSS
SaveExploits1References1
Veracode
Veracode
•added 2025/05/27 5:41 a.m.•16 views

Improper Authorization

pypickle is vulnerable to Improper Authorization. The vulnerability is due to insufficient access control in the Save function of pypickle/pypickle.py, allowing local attackers to perform unauthorized actions...

5.5CVSS5.9AI score0.00247EPSS
SaveExploits1References12Affected Software1
Snyk
Snyk
•added 2025/05/26 10:03 a.m.•9 views

Improper Authorization

Overview pypickle is a pypickle is a Python library to save and load variables in pickle files. Affected versions of this package are vulnerable to Improper Authorization due to the Save function. An attacker can manipulate the authorization process by exploiting local access to the system. This ...

5.5CVSS5.7AI score0.00247EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/05/26 9:59 a.m.•9 views

Deserialization of Untrusted Data

Overview pypickle is a pypickle is a Python library to save and load variables in pickle files. Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the load function. An attacker can manipulate serialized objects to execute arbitrary code by supplying...

7.8CVSS6.5AI score0.00337EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2025/05/26 9:30 a.m.•24 views

pypickle unsafe deserialization vulnerability

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

7.8CVSS4.8AI score0.00337EPSS
SaveExploits1References10Affected Software1
osv_ghsa
osv_ghsa
•added 2025/05/26 9:30 a.m.•26 views

GHSA-5QWJ-342R-H886 pypickle unsafe deserialization vulnerability

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

5.3CVSS4.8AI score0.00337EPSS
SaveExploits1References10
osv_ghsa
osv_ghsa
•added 2025/05/26 9:30 a.m.•22 views

GHSA-QPXX-2CWH-R5VH pypickle Incorrect Privilege Assignment vulnerability

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.3CVSS4.9AI score0.00247EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
•added 2025/05/26 9:30 a.m.•24 views

pypickle Incorrect Privilege Assignment vulnerability

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.5CVSS4.9AI score0.00247EPSS
SaveExploits1References12Affected Software1
vulnersOsv
vulnersOsv
•added 2025/05/26 9:30 a.m.•3 views

kolibri-light (>=0.1.1, <=0.3.2) potentially affected by CVE-2025-5174 via pypickle (1.1.0)

pypickle PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypickle and may be impacted: - kolibri-light =0.1.1, =0.3.2 Source cves: CVE-2025-5174 Source advisory: OSV:GHSA-5QWJ-342R-H886...

7.8CVSS5.8AI score0.00337EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/05/26 9:30 a.m.•3 views

kolibri-light (>=0.1.1, <=0.3.2) potentially affected by CVE-2025-5175 via pypickle (1.1.0)

pypickle PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypickle and may be impacted: - kolibri-light =0.1.1, =0.3.2 Source cves: CVE-2025-5175 Source advisory: OSV:GHSA-QPXX-2CWH-R5VH...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/05/26 8:15 a.m.•3 views

kolibri-light (>=0.1.1, <=0.3.2) potentially affected by CVE-2025-5175 via pypickle (1.1.0)

pypickle PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypickle and may be impacted: - kolibri-light =0.1.1, =0.3.2 Source cves: CVE-2025-5175 Source advisory: OSV:PYSEC-2025-46...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits1
osv_pysec
osv_pysec
•added 2025/05/26 8:15 a.m.•31 views

PYSEC-2025-46

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.5CVSS4.9AI score0.00247EPSS
SaveExploits1References18
PyPA
PyPA
•added 2025/05/26 8:15 a.m.•20 views

PYSEC-2025-46

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.5CVSS4.9AI score0.00247EPSS
SaveExploits1References18Affected Software1
Cvelist
Cvelist
•added 2025/05/26 7:31 a.m.•34 views

CVE-2025-5175 erdogant pypickle pypickle.py save improper authorization

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.3CVSS0.00247EPSS
SaveExploits1References8
CVE
CVE
•added 2025/05/26 7:31 a.m.•77 views

CVE-2025-5175

CVE-2025-5175 affects erdogant pypickle up to 1.1.5. The issue is in Save (pypickle/pypickle.py) leading to improper authorization. Exploitation is described as local and publicly disclosed. Remediation: upgrade to 2.0.0; patch 14b4cae704a0bb4eb6723e238f25382d847a1917.

5.5CVSS4.9AI score0.00247EPSS
SaveExploits1References8Affected Software1
Mend
Mend
•added 2025/05/26 7:31 a.m.•10 views

CVE-2025-5175

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.5CVSS4.9AI score0.00247EPSS
SaveExploits1References13
osv_cve
osv_cve
•added 2025/05/26 7:31 a.m.•20 views

CVE-2025-5175 erdogant pypickle pypickle.py save improper authorization

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

4.8CVSS5.3AI score
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2025/05/26 7:31 a.m.•5 views

CVE-2025-5175 erdogant pypickle pypickle.py save improper authorization

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.3CVSS4.9AI score0.00247EPSS
SaveExploits1References8
Rows per page
Query Builder