14 matches found
matrice-common (0.2.1), matrice-compute (>=0.1.162, <=0.1.163) +2 more potentially affected by CVE-2026-10142 via kafka-python (>=2.3.0, <=2.3.1)
kafka-python PYPI version =2.3.0, =0.1.162, =1.1.13, =0.2.5a4, =0.2.6a4 Source cves: CVE-2026-10142 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17327850...
matrice-common (0.2.1), matrice-compute (>=0.1.162, <=0.1.163) +2 more potentially affected by CVE-2026-10143 via kafka-python (>=2.3.0, <=2.3.1)
kafka-python PYPI version =2.3.0, =0.1.162, =1.1.13, =0.2.5a4, =0.2.6a4 Source cves: CVE-2026-10143 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17320566...
aws-encryption-sdk-cli (>=2.1.0, <=3.1.0), cloudformation-cli-python-lib (>=2.1.9, <=2.1.16) +2 more potentially affected by CVE-2026-6550 via aws-encryption-sdk (>=2.0.0, <=3.1.1)
aws-encryption-sdk PYPI version =2.0.0, =2.1.0, =2.1.9, =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2026-6550 Source advisory: GHSA-V638-38FC-RHFV...
CVE-2022-27271
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
EUVD-2022-31777
Malicious code in bioql PyPI...
CVE-2022-27271
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
Remote code execution
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
CVE-2022-27271
CVE-2022-27271 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is an RCE via the python-lib component, triggered by a crafted packet. Affected firmware versions are prior to v1.0.0.r11700. Public sources in the connected documents (Red Hat, PT-Platform) corroborate th...
CVE-2022-27271
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
CVE-2022-27271: Improper Neutralization of Special Elements used in an OS Command
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
cloudformation-cli-python-lib (2.1.9) potentially affected by unknown CVE via aws-encryption-sdk (2.0.0)
aws-encryption-sdk PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-encryption-sdk and may be impacted: - cloudformation-cli-python-lib 2.1.9 Source cves: unknown CVE Source advisory: OSV:GHSA-X5H4-9GQW-942J...
cloudformation-cli-python-lib (2.1.9) potentially affected by unknown CVE via aws-encryption-sdk (2.0.0)
aws-encryption-sdk PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-encryption-sdk and may be impacted: - cloudformation-cli-python-lib 2.1.9 Source cves: unknown CVE Source advisory: GHSA-X5H4-9GQW-942J...
Code Injection in baidu/cup
Description CUP, common useful python-lib. Currently, Most popular python lib in baidu Vulnerability description untrusted loading of data by the pickle.load function leading to Arbitrary code execution. Proof of Concept Run exploit.py import os import pickle os.system'pip3 install cup' from...