Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2026/05/19 12:0 a.m.11 views

PT-2026-41945

Name of the Vulnerable Software and Affected Versions APScheduler affected versions not specified Description The JSONSerializer and CBORSerializer are subject to Remote Code Execution RCE through insecure deserialization. The unmarshal object function enables arbitrary class instantiation and...

6AI score0.00726EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/06 3:31 p.m.3 views

EUVD-2026-19235

A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.setstate of the file src/datrie.pyx of the component trie File Handler. The manipulation results in deserialization. The attack can be launched remotely. The exploit has been mad...

7.5CVSS6.2AI score0.00264EPSS
Exploits0References7
CVE
CVE
added 2026/04/06 1:0 p.m.7 views

CVE-2026-5659

The CVE-2026-5659 entry affects pytries datrie up to 0.8.3. The vulnerable elements are Trie.load, Trie.read, and Trie.setstate in src/datrie.pyx, with the described issue: deserialization leading to remote execution. The exploit is publicly disclosed and could be used. Connected sources consiste...

7.5CVSS6.2AI score0.00264EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/06 1:0 p.m.0 views

CVE-2026-5659 pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization

A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.setstate of the file src/datrie.pyx of the component trie File Handler. The manipulation results in deserialization. The attack can be launched remotely. The exploit has been mad...

7.5CVSS6.2AI score0.00264EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/06 1:0 p.m.33 views

CVE-2026-5659 pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization

A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.setstate of the file src/datrie.pyx of the component trie File Handler. The manipulation results in deserialization. The attack can be launched remotely. The exploit has been mad...

7.5CVSS0.00264EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30602

A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie. setstate of the file src/datrie.pyx of the component trie File Handler. The manipulation results in deserialization. The attack can be launched remotely. The exploit has been ma...

7.5CVSS6.2AI score0.00264EPSS
Exploits0References7
CVE
CVE
added 2002/05/03 4:0 a.m.47 views

CVE-2001-1324

The CVE-2001-1324 issue affects Paul Jarc’s idtools (cvmlogin and statfile) prior to 2001-06-27, where the code does not properly validate the return value of pathexec_env. This absence of check could allow setuid to the UID environmental variable, enabling local privilege escalation. The availab...

4.6CVSS6.9AI score0.00326EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2002/05/03 4:0 a.m.20 views

CVE-2001-1324

cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexecenv function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges...

6.5AI score0.00326EPSS
Exploits0References3
Rows per page
Query Builder