Lucene search
K

151 matches found

NVD
NVD
added 2017/08/07 6:29 p.m.10 views

CVE-2017-12653

360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory...

7.8CVSS7.6AI score0.0224EPSS
Exploits2References1
Prion
Prion
added 2017/08/07 6:29 p.m.12 views

Design/Logic Flaw

360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory...

6.8CVSS7.5AI score0.0224EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2017/08/07 6:0 p.m.15 views

CVE-2017-12653

360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory...

7.6AI score0.0224EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2016/10/26 12:0 a.m.41 views

Amazon Linux: Security Advisory (ALAS-2016-724)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.45123EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2016/10/26 12:0 a.m.33 views

Amazon Linux: Security Advisory (ALAS-2016-741)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS7AI score0.09899EPSS
Exploits0References2
Amazon
Amazon
added 2016/09/01 12:0 a.m.50 views

Medium: python34, python27, python26

Issue Overview: It was discovered that the Python CGIHandler class did not properly protect against the HTTPPROXY variable name clash in a CGI context. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a Python CGI script to an attacker-controlled proxy via a...

6.1CVSS7.8AI score0.09899EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2016/05/31 10:4 a.m.49 views

Moderate: Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Updated python27 packages are now available as a part of Red Hat Software Collections 2.2 for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

5.9CVSS6.3AI score0.02979EPSS
Exploits1References13
OpenVAS
OpenVAS
added 2016/02/05 12:0 a.m.46 views

Oracle: Security Advisory (ELSA-2015-1064)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.5AI score0.33997EPSS
Exploits15References2
Oracle linux
Oracle linux
added 2016/02/04 12:0 a.m.79 views

python27 security, bug fix, and enhancement update

python27 1.1-17 - Require python-pip and python-wheel note: in rh-python34 this is not necessary, because 'python' depends on these. python27-python 2.7.8-3 - Add httplib fix for CVE-2013-1752 Resolves: rhbz1187779 2.7.8-2 - Fix %check unset DISPLAY setion not failing properly on failed test -...

7.5CVSS0.2AI score0.33997EPSS
Exploits15
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.28 views

Amazon Linux: Security Advisory (ALAS-2014-380)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.2AI score0.00427EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.28 views

Amazon Linux: Security Advisory (ALAS-2014-440)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.07232EPSS
Exploits6References3
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.25 views

Amazon Linux: Security Advisory (ALAS-2015-552)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.3AI score0.02758EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.27 views

Amazon Linux: Security Advisory (ALAS-2015-512)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.8AI score0.0114EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.31 views

Amazon Linux: Security Advisory (ALAS-2014-293)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.33997EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.25 views

Amazon Linux: Security Advisory (ALAS-2012-81)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS8.9AI score0.02773EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.36 views

Amazon Linux: Security Advisory (ALAS-2013-220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.9AI score0.01382EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2015/06/25 12:0 a.m.35 views

Amazon Linux AMI : python27 (ALAS-2015-552)

It was discovered that multiple Python standard library modules implementing network protocols such as httplib or smtplib failed to restrict sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of memory.CVE-2013-1752 ...

7.5CVSS6.9AI score0.02758EPSS
Exploits2References4
Amazon
Amazon
added 2015/06/22 12:0 a.m.50 views

Medium: python27

Issue Overview: It was discovered that multiple Python standard library modules implementing network protocols such as httplib or smtplib failed to restrict sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of...

7.5CVSS8.1AI score0.02758EPSS
Exploits2
RedHat Linux
RedHat Linux
added 2015/06/04 8:27 a.m.68 views

Moderate: Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Updated python27 collection packages that fix multiple security issues and several bugs are now available as part of Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

9.8CVSS7.2AI score0.33997EPSS
Exploits15References10
Tenable Nessus
Tenable Nessus
added 2014/11/06 12:0 a.m.49 views

Amazon Linux AMI : python27 (ALAS-2014-440)

It was discovered that Python built-in module CGIHTTPServer does not properly handle URL-encoded path separators in URLs which may enable attackers to disclose a CGI script's source code or execute arbitrary scripts in the server's document root. CVE-2014-4650 Integer overflow in bufferobject.c i...

9.8CVSS7.5AI score0.07232EPSS
Exploits6References4
Rows per page
Query Builder