Lucene search
+L

293 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/30 12:00 a.m.•5 views

CVE-2012-5493: Improper Control of Generation of Code

gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain permissions to bypass the Python sandbox and execute arbitrary Python code via unspecified vectors...

8.5CVSS6.3AI score0.01711EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/30 12:00 a.m.•5 views

PT-2014-2314

Name of the Vulnerable Software and Affected Versions Plone versions prior to 4.2.3 Plone version 4.3 before beta 1 Description The issue allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to...

8.5CVSS0.01711EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/12 12:00 a.m.•7 views

CVE-2008-6954: Undefined Security Weakness

The web interface CobblerWeb in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules...

9CVSS6.3AI score0.02163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2009/08/12 12:00 a.m.•10 views

PT-2009-2423

Name of the Vulnerable Software and Affected Versions: Cobbler versions prior to 1.2.9 Description: The issue allows remote authenticated users to execute arbitrary Python code with root privileges in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules. This can be...

9CVSS6.3AI score0.02163EPSS
SaveExploits0References17
NVD
NVD
•added 2007/11/07 9:46 p.m.•21 views

CVE-2007-5741

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...

7.5CVSS7.5AI score0.02205EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/07 12:00 a.m.•7 views

CVE-2007-5741: Improper Control of Generation of Code

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...

7.5CVSS6.4AI score0.02205EPSS
SaveExploits0References2
OSV
OSV
•added 2007/03/03 8:19 p.m.•20 views

CVE-2007-1253

Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...

7.8AI score
SaveExploits0References11
OSV
OSV
•added 2005/10/24 10:02 a.m.•18 views

DEBIAN-CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.3CVSS6.5AI score0.03884EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2005/10/24 4:00 a.m.•16 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

8.1AI score0.03884EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2005/10/24 12:00 a.m.•12 views

PT-2005-4113 · Blender · Blender

Name of the Vulnerable Software and Affected Versions: Blender version 2.36 Description: The issue allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call. This occurs in the bvh import.py module. Recommendations: For...

7.5CVSS7.7AI score0.03884EPSS
SaveExploits2References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/24 12:00 a.m.•7 views

CVE-2005-3302: Improper Control of Generation of Code

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.5CVSS6.3AI score0.03884EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/13 12:00 a.m.•6 views

CVE-2005-2875: Undefined Security Weakness

Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes...

7.5CVSS6.3AI score0.01906EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/07 12:00 a.m.•9 views

CVE-2005-2483: Undefined Security Weakness

Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services .ks script, which can reference functions from libraries that are used by that script...

7.5CVSS6.3AI score0.03068EPSS
SaveExploits1References1
Rows per page
Query Builder