Lucene search
+L

29 matches found

osv-pysec
osv-pysec
•added 2024/11/24 4:15 p.m.•24 views

PYSEC-2024-187

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

9.8CVSS7.7AI score0.01572EPSS
SaveExploits1References4
PyPA
PyPA
•added 2024/11/24 4:15 p.m.•15 views

PYSEC-2024-187

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

9.8CVSS7.6AI score0.01572EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2024/11/24 12:00 a.m.•499 views

CVE-2024-53899

CVE-2024-53899 affects python-virtualenv: versions older than 20.26.6-1 are vulnerable to command injection via activation scripts due to unquoted/magic template strings during activation. The issue is remedied in newer packages (≥ 20.26.6-1); upgrade to the patched release to mitigate. Connected...

8.4CVSS7AI score0.01572EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/24 12:00 a.m.•3 views

CVE-2024-53899: Improper Neutralization of Special Elements used in a Command

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.4CVSS7.4AI score0.01572EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/24 12:00 a.m.•29 views

CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

7.3AI score0.01572EPSS
SaveExploits1References3
Mend
Mend
•added 2024/11/24 12:00 a.m.•5 views

CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.6CVSS0.01572EPSS
SaveExploits1References9
Debian CVE
Debian CVE
•added 2024/11/24 12:00 a.m.•24 views

CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.4CVSS7.7AI score0.01572EPSS
SaveExploits1
osv-usn
osv-usn
•added 2022/06/07 2:43 p.m.•29 views

USN-5315-1 ansible vulnerabilities

It was discovered that Ansible did not properly manage directory permissions when running playbooks with an unprivileged become user. A local attacker could possibly use this issue to cause a race condition, escalate privileges and execute arbitrary code. This issue only affected Ubuntu 16.04 ESM...

7.1CVSS7AI score0.00897EPSS
SaveExploits1References5
CNVD
CNVD
•added 2015/05/28 12:00 a.m.•17 views

Dell NetVault Backup Heap Buffer Overflow Remote Code Execution Vulnerability

NetVault Backup is a cross-platform backup and recovery software solution that protects data and applications in physical and virtual environments. It is scalable and supports multiple server and application platforms across the enterprise. It has a single, intuitive interface that requires minim...

10CVSS7.5AI score0.06033EPSS
SaveExploits0References1
Rows per page
Query Builder