Lucene search
+L

74123 matches found

osv_root
osv_root
•added 2026/09/11 9:07 a.m.•32 views

ROOT-OS-DEBIAN-11-CVE-2024-5642 CVE-2024-5642 in python3.9 - Patched by Root

Root has patched CVE-2024-5642 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

6.5CVSS6AI score0.00744EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 9:07 a.m.•26 views

ROOT-OS-DEBIAN-11-CVE-2026-11972 CVE-2026-11972 in python3.9 - Patched by Root

Root has patched CVE-2026-11972 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

8.2CVSS5.7AI score0.00715EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 9:07 a.m.•23 views

ROOT-OS-DEBIAN-11-CVE-2026-3276 CVE-2026-3276 in python3.9 - Patched by Root

Root has patched CVE-2026-3276 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

6.3CVSS7.4AI score0.00486EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 9:07 a.m.•29 views

ROOT-OS-DEBIAN-11-CVE-2026-1502 CVE-2026-1502 in python3.9 - Patched by Root

Root has patched CVE-2026-1502 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

4.5CVSS6.2AI score0.00562EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 9:07 a.m.•38 views

ROOT-OS-DEBIAN-11-CVE-2026-7210 CVE-2026-7210 in python3.9 - Patched by Root

Root has patched CVE-2026-7210 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

9.8CVSS7AI score0.00672EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 9:07 a.m.•25 views

ROOT-OS-DEBIAN-11-CVE-2026-9669 CVE-2026-9669 in python3.9 - Patched by Root

Root has patched CVE-2026-9669 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

8.2CVSS7.4AI score0.00428EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 9:07 a.m.•18 views

ROOT-OS-DEBIAN-11-CVE-2026-15308 CVE-2026-15308 in python3.9 - Patched by Root

Root has patched CVE-2026-15308 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

8.7CVSS5.7AI score0.00637EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 6:51 a.m.•23 views

ROOT-OS-DEBIAN-13-CVE-2026-11972 CVE-2026-11972 in python3.13 - Patched by Root

Root has patched CVE-2026-11972 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

8.2CVSS5.7AI score0.00715EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 6:31 a.m.•26 views

ROOT-OS-DEBIAN-12-CVE-2026-15308 CVE-2026-15308 in python3.11 - Patched by Root

Root has patched CVE-2026-15308 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

8.7CVSS5.7AI score0.00637EPSS
SaveExploits0
osv_root
osv_root
•added 2026/09/11 6:31 a.m.•20 views

ROOT-OS-DEBIAN-12-CVE-2026-9669 CVE-2026-9669 in python3.11 - Patched by Root

Root has patched CVE-2026-9669 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

8.2CVSS7.4AI score0.00428EPSS
SaveExploits0
osv_bit
osv_bit
•added 2026/09/11 5:56 a.m.•26 views

BIT-PYTHON-2026-17084 stringprep.map_table_b2() deviates from RFC 3454 Table B.2

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

6CVSS5.9AI score0.00734EPSS
SaveExploits0References13
osv_bit
osv_bit
•added 2026/09/11 5:56 a.m.•30 views

BIT-PYTHON-MIN-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.9AI score0.00528EPSS
SaveExploits0References12
osv_bit
osv_bit
•added 2026/09/11 5:56 a.m.•25 views

BIT-PYTHON-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.9AI score0.00528EPSS
SaveExploits0References12
osv_bit
osv_bit
•added 2026/09/11 5:56 a.m.•28 views

BIT-PYTHON-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

2.1CVSS5.9AI score0.00526EPSS
SaveExploits0References14
osv_bit
osv_bit
•added 2026/09/11 5:56 a.m.•28 views

BIT-PYTHON-MIN-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

2.1CVSS5.9AI score0.00526EPSS
SaveExploits0References14
osv_bit
osv_bit
•added 2026/09/11 5:48 a.m.•36 views

BIT-LIBPYTHON-2026-17084 stringprep.map_table_b2() deviates from RFC 3454 Table B.2

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

6CVSS5.9AI score0.00734EPSS
SaveExploits0References13
osv_bit
osv_bit
•added 2026/09/11 5:48 a.m.•29 views

BIT-LIBPYTHON-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.9AI score0.00528EPSS
SaveExploits0References12
osv_bit
osv_bit
•added 2026/09/11 5:48 a.m.•34 views

BIT-LIBPYTHON-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

2.1CVSS5.9AI score0.00526EPSS
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/11 12:32 a.m.•14 views

ALEAPP v2026.3.3

Android Logs Events And Protobuf Parser If you want to contribute hit me up here: https://abrignoni.github.io Blog posts here: https://leapps.org/blog Download Pre-built releases need no Python installation: ALEAPP GitHub Releases, or LEAPPs Releases for the whole LEAPP family. Platform| Download...

6.4AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 12:31 a.m.•19 views

EUVD-2026-75781

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS6.7AI score0.00559EPSS
SaveExploits0References2
Rows per page
Query Builder