Lucene search
K

6 matches found

OSV
OSV
added 2020/03/23 11:15 p.m.12 views

CVE-2020-5252

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

4.1CVSS6.9AI score
Exploits0References3
NVD
NVD
added 2020/03/23 11:15 p.m.6 views

CVE-2020-5252

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

5CVSS5.2AI score0.00069EPSS
Exploits0References3
Prion
Prion
added 2020/03/23 11:15 p.m.7 views

Design/Logic Flaw

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

1.9CVSS4.6AI score0.00069EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/03/23 11:5 p.m.11 views

CVE-2020-5252 Malicious package may avoid detection in python auditing

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

5CVSS5.2AI score0.00069EPSS
Exploits0References3
CVE
CVE
added 2020/03/23 11:5 p.m.61 views

CVE-2020-5252

CVE-2020-5252 concerns the command-line Python package Safety. Reports describe a low-severity issue where two Python-related characteristics permit a malicious package to poison-pill or obfuscate other packages, allowing bypass of Safety’s detection routines. This is said to occur when Safety ru...

5CVSS4.5AI score0.00069EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/03/23 12:0 a.m.16 views

CVE-2020-5252

The command-line “safety” package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

5CVSS0.7AI score0.00069EPSS
Exploits0References4
Rows per page
Query Builder