CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

60030 matches found

PyPA•added 2026/07/14 5:17 p.m.•20 views

PYSEC-2026-3455

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with C...

7.5CVSS5.2AI score0.00349EPSS

SaveExploits0References3Affected Software1

OSV•added 2026/07/14 5:17 p.m.•4 views

DEBIAN-CVE-2026-59885

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

7.5CVSS6.1AI score0.00335EPSS

SaveExploits0References1

AlpineLinux•added 2026/07/14 4:41 p.m.•11 views

CVE-2026-59884

7.5CVSS6.1AI score0.00349EPSS

SaveExploits0

OSV•added 2026/07/14 4:40 p.m.•7 views

CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

7.5CVSS6.1AI score

SaveExploits0References5

OSV•added 2026/07/14 4:17 p.m.•5 views

UBUNTU-CVE-2026-59204

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and...

8.7CVSS6.1AI score0.00393EPSS

SaveExploits1References6

RedHat Linux•added 2026/07/14 3:56 p.m.•6 views

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

8.7CVSS6AI score0.00551EPSS

SaveExploits0References11

RedHat Linux•added 2026/07/14 3:56 p.m.•8 views

Important: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

8.7CVSS6.1AI score0.00551EPSS

SaveExploits0References2

IBM Security Bulletins•added 2026/07/14 2:57 p.m.•17 views

Security Bulletin: Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

Summary The Python Interpreter component and legacy Python REPL Tool component provided flow and agent authors the ability to execute Python code within a scoped globals environment restricted to an operator-configured import allow-list and curated safe builtins. An attacker who could provide inp...

9.9CVSS6.2AI score0.00288EPSS

SaveExploits0Affected Software1