Lucene search
+L

33 matches found

OSV
OSV
added 2014/09/02 2:55 p.m.12 views

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.3AI score
SaveExploits0References4
OSV
OSV
added 2014/09/02 2:55 p.m.2 views

DEBIAN-CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.5CVSS7.9AI score0.0457EPSS
SaveExploits1References1
NVD
NVD
added 2014/09/02 2:55 p.m.27 views

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.5CVSS7.4AI score0.0457EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2014/09/02 2:55 p.m.26 views

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.5CVSS6.2AI score0.0457EPSS
SaveExploits1References1
Prion
Prion
added 2014/09/02 2:55 p.m.14 views

Code injection

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.5CVSS8AI score0.0457EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2014/09/02 2:00 p.m.59 views

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.5CVSS7.2AI score0.0457EPSS
SaveExploits1
Cvelist
Cvelist
added 2014/09/02 2:00 p.m.44 views

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

7.3AI score0.0457EPSS
SaveExploits1References3
CVE
CVE
added 2014/09/02 2:00 p.m.83 views

CVE-2014-0485

S3QL is vulnerable to CVE-2014-0485: versions 1.18.1 and earlier use the Python pickle module unsafely, allowing remote code execution via a crafted serialized object in backends/common.py or backends/local.py. Public advisories reference an update to 2.13 as the remediation path (e.g., Fedora ad...

7.5CVSS7.4AI score0.0457EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/08/28 12:00 a.m.20 views

Debian DSA-3013-1 : s3ql - security update

Nikolaus Rath discovered that s3ql, a file system for online data storage, used the pickle functionality of the Python programming language in an unsafe way. As a result, a malicious storage backend or man-in-the-middle attacker was able execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Netwo...

7.5CVSS5.8AI score0.0457EPSS
SaveExploits1References3
Debian
Debian
added 2014/08/27 7:32 p.m.129 views

[SECURITY] [DSA 3013-1] s3ql security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3013-1 [email protected] http://www.debian.org/security/ Florian Weiemr August 27, 2014 http://www.debian.org/security/faq -...

7.5CVSS6.3AI score0.0457EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/08/27 12:00 a.m.26 views

Debian Security Advisory DSA 3013-1 (s3ql - security update)

Nikolaus Rath discovered that s3ql, a file system for online data storage, used the pickle functionality of the Python programming language in an unsafe way. As a result, a malicious storage backend or man-in-the-middle attacker was able execute arbitrary code. OpenVAS Vulnerability Test $Id:...

7.5CVSS0.1AI score0.0457EPSS
SaveExploits1References1
OSV
OSV
added 2014/08/27 12:00 a.m.26 views

DSA-3013-1 s3ql - security update

Bulletin has no description...

7.5CVSS6.1AI score0.0457EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/08/26 12:00 a.m.16 views

Debian: Security Advisory (DSA-3013-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.0457EPSS
SaveExploits1References3
Rows per page
Query Builder