Lucene search
+L

135 matches found

OSV
OSV
added 2021/10/18 3:15 p.m.7 views

DEBIAN-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS8.5AI score0.01514EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.7 views

The vulnerability of the HTTP request programming language Python method, related to the lack of mechanisms for encoding or shielding output data, allows attackers to gain access to confidential information and compromise its integrity.

The vulnerability of the HTTP request programming language Python method is related to the lack of mechanisms for encoding or encrypting output data. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

7.2CVSS6.8AI score0.0642EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.14 views

The vulnerability of the urllib2 module in the Python programming language, related to the failure to eliminate the crlf sequence, allows attackers to compromise data integrity.

The vulnerability of the urllib2 module in the Python programming language is related to the lack of measures taken to neutralize the crlf sequence. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

6.1CVSS6.8AI score0.0552EPSS
SaveExploits1References9Affected Software3
CNVD
CNVD
added 2021/03/01 12:0 a.m.10 views

Linkedin Oncall Cross-Site Scripting Vulnerability

Linkedin Oncall is the United States Linkedin company based on Python language can be used to manage the calendar planning platform of the building system. A security vulnerability exists in Linkedin Oncall versions 1.4.0 and earlier, which stems from the mishandling of the "No results found"...

6.1CVSS6.6AI score0.03203EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2021/02/24 12:0 a.m.261 views

python jsonpickle 2.0.0 - Remote Code Execution

Exploit Title: python jsonpickle 2.0.0 - Remote Code Execution Date: 24-2-2021 Vendor Homepage: https://jsonpickle.github.io Exploit Author: Adi Malyanker, Shay Reuven Software Link: https://github.com/jsonpickle/jsonpickle Version: 2.0.0 Tested on: windows, linux Python is an open source languag...

5.3AI score
SaveExploits0
Gitee
Gitee
added 2020/10/26 9:46 p.m.11 views

penetration

This repository contains a collection of 0-day exploits for various web applications, including CMS platforms. The exploits are categorized by the affected application, and each category contains multiple exploits. The exploits are written in various programming languages, including PHP, Python,...

8AI score
SaveExploits0
CNVD
CNVD
added 2020/09/16 12:0 a.m.2 views

Librepo Directory Traversal Vulnerability

Librepo is a library that provides C and Python APIs for downloading packages in rpm-md format and linux repository metadata. A directory traversal vulnerability exists in the Librepo product. The vulnerability stems from a failure of a networked system or product to properly filter special...

8.5CVSS6.9AI score0.02526EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/16 12:0 a.m.46 views

Debian DLA-2280-1 : python3.5 security update

Multiple security issues were discovered in Python, an interactive high-level object-oriented language. CVE-2018-20406 Modules/pickle.c has an integer overflow via a large LONGBINPUT value that is mishandled during a 'resize to twice the size' attempt. This issue might cause memory exhaustion, bu...

9.8CVSS7.5AI score0.21443EPSS
SaveExploits8References16
Fedora
Fedora
added 2020/01/20 3:19 a.m.18 views

[SECURITY] Fedora 30 Update: python3-3.7.6-1.fc30

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

2.1AI score
SaveExploits0
Fedora
Fedora
added 2019/11/03 12:12 a.m.46 views

[SECURITY] Fedora 30 Update: python3-3.7.5-1.fc30

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

7.5CVSS2.1AI score0.05366EPSS
SaveExploits0
Fedora
Fedora
added 2019/11/02 1:44 a.m.53 views

[SECURITY] Fedora 29 Update: python3-3.7.5-1.fc29

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

9.8CVSS2.1AI score0.21443EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2019/10/23 12:0 a.m.10 views

PT-2019-5897 · Python +4 · Python +4

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to a CRLF injection vulnerability in the urllib2 module of the Python programming language. This could allow a remote attacker to impact data integrity. Recommendations:...

10CVSS6.5AI score0.73327EPSS
SaveExploits75References383
OpenVAS
OpenVAS
added 2019/05/28 12:0 a.m.44 views

Fedora Update for python3 FEDORA-2019-ec26883852

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.7AI score0.21443EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.72 views

Fedora Update for python3 FEDORA-2019-243442e600

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.7AI score
SaveExploits0References2
Fedora
Fedora
added 2019/04/05 1:56 a.m.57 views

[SECURITY] Fedora 28 Update: python3-3.6.8-3.fc28

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

9.8CVSS2.1AI score0.21443EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.7 views

The vulnerability of the Django library for the Python programming language, which allows attackers to compromise the integrity of protected information

The vulnerability of the Django library for the Python programming language is related to insufficient elimination of special elements in the output data used by the lower-level component. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.5CVSS6.5AI score0.03425EPSS
SaveExploits0References4Affected Software2
Fedora
Fedora
added 2019/03/29 7:41 p.m.41 views

[SECURITY] Fedora 30 Update: python3-3.7.2-8.fc30

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

9.8CVSS2.1AI score0.09125EPSS
SaveExploits0
Fedora
Fedora
added 2019/01/19 1:55 a.m.14 views

[SECURITY] Fedora 28 Update: python3-docs-3.6.8-1.fc28

The python3-docs package contains documentation on the Python 3 programming language and interpreter. Install the python3-docs package if you'd like to use the documentation for the Python 3 language...

2.3AI score
SaveExploits0
Fedora
Fedora
added 2019/01/19 1:55 a.m.12 views

[SECURITY] Fedora 28 Update: python3-3.6.8-1.fc28

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

2.1AI score
SaveExploits0
CNVD
CNVD
added 2018/04/19 12:0 a.m.4 views

Zulip Server Cross-Site Scripting Vulnerability

Zulip Server is a set of open source group chat application written in Python based on the Django framework . A cross-site scripting vulnerability exists in versions of Zulip Server prior to 1.7.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

5.4CVSS6AI score0.00746EPSS
SaveExploits0References1
Rows per page
Query Builder