Lucene search
+L

156 matches found

PyPA
PyPA
•added 2014/09/30 2:55 p.m.•14 views

PYSEC-2014-36

Cross-site scripting XSS vulnerability in pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "u,translate."...

4.3CVSS6AI score0.01198EPSS
SaveExploits0References5Affected Software1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•29 views

Sudo 1.6.x Environment Variable Handling Security Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A local attacker with the...

7.1AI score
SaveExploits0
NVD
NVD
•added 2013/03/05 9:38 p.m.•21 views

CVE-2011-4355

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS7.1AI score0.0036EPSS
SaveExploits1References5
Prion
Prion
•added 2013/03/05 9:38 p.m.•22 views

Design/Logic Flaw

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS6.8AI score0.0036EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
•added 2013/03/05 9:38 p.m.•30 views

CVE-2011-4355

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS6.8AI score0.0036EPSS
SaveExploits1References3
OSV
OSV
•added 2013/03/05 9:38 p.m.•11 views

UBUNTU-CVE-2011-4355

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS6.8AI score0.0036EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2013/03/04 9:00 p.m.•33 views

CVE-2011-4355

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

8.9AI score0.0036EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2013/03/04 9:00 p.m.•38 views

CVE-2011-4355

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS7.3AI score0.0036EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/04 12:00 a.m.•4 views

CVE-2011-4355: Undefined Security Weakness

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS5.8AI score0.0036EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2013/02/20 4:20 p.m.•9 views

gdb: object file .debug_gdb_scripts section improper input validation

GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts...

6.9CVSS6.7AI score0.0036EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2013/01/25 12:00 a.m.•32 views

SuSE 11.1 Security Update : apache2-mod_python (SAT Patch Number 6247)

Apache2 modpython has been changed to enable randomized hashes to help fixing denial of service problems by injecting prepared values into Python hash functions. CVE-2012-1150 As some Python scripts might need a known hashing order, the old behaviour can be restored using a newly introduced modul...

5CVSS7AI score0.0506EPSS
SaveExploits3References3
RedHat Linux
RedHat Linux
•added 2012/12/04 6:52 p.m.•40 views

Important: Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.1

Red Hat Enterprise Virtualization Manager 3.1 is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the C...

6.8CVSS5.9AI score0.00895EPSS
SaveExploits0References15
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•28 views

Mandriva Update for emacs MDVSA-2008:216 (emacs)

Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2008:216 emacs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.2CVSS5.9AI score0.00528EPSS
SaveExploits0References2
exploitpack
exploitpack
•added 2006/01/09 12:00 a.m.•22 views

Sudo 1.6.x - Environment Variable Handling Security Bypass (1)

Sudo 1.6.x - Environment Variable Handling Security Bypass 1 source: https://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/01/09 12:00 a.m.•44 views

Sudo 1.6.x - Environment Variable Handling Security Bypass (1)

source: https://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A local attacker with the ability to run Python scripts can...

4.6CVSS7.2AI score0.01077EPSS
SaveExploits4
Cvelist
Cvelist
•added 2002/03/15 5:00 a.m.•43 views

CVE-2002-0131

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script...

6.7AI score0.06574EPSS
SaveExploits0References4
Rows per page
Query Builder