Lucene search
K

15 matches found

OSV
OSV
added 6 days ago6 views

BIT-LIBPYTHON-2026-12003 CPython >3.11 Insecure Input Validation resulting in privilege escalation

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

5.3CVSS5.4AI score0.00136EPSS
Exploits0References9
NVD
NVD
added 2026/06/16 5:16 p.m.10 views

CVE-2026-12003

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

5.3CVSS0.00136EPSS
Exploits0References8
EUVD
EUVD
added 2026/06/16 3:18 p.m.5 views

EUVD-2026-37125

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

5.3CVSS5.4AI score0.00136EPSS
Exploits0References3
OSV
OSV
added 2026/06/16 3:18 p.m.5 views

PSF-2026-28

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

5.3CVSS5.4AI score0.00136EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/06/16 3:18 p.m.26 views

CVE-2026-12003 CPython >3.11 Insecure Input Validation resulting in privilege escalation

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

5.3CVSS0.00136EPSS
Exploits0References7
CVE
CVE
added 2026/06/16 3:18 p.m.24 views

CVE-2026-12003

Technical details are not publicly available in the provided documents. Monitor for updates.

5.3CVSS5.5AI score0.00136EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/06/16 12:0 a.m.10 views

PT-2026-49724

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description On Windows, Python uses the VPATH variable to locate landmarks, such as 'Modules/setup.local', to determine if it is running in a source tree and adjust the default sys.path. In certain...

5.3CVSS5.2AI score0.00136EPSS
Exploits0References12
CVE
CVE
added 2026/05/12 5:46 a.m.16 views

CVE-2026-0804

Technical details are not publicly available in the provided documents. Monitor for updates.

7.3CVSS5.8AI score0.00128EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-20269

Malicious code in bioql PyPI...

8.2CVSS6.5AI score0.00217EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/03/09 3:53 a.m.1 views

SUSE CVE-2023-1221

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

4.3CVSS8.7AI score0.00332EPSS
Exploits0References6
OSV
OSV
added 2022/11/01 8:15 p.m.2 views

DEBIAN-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS7.5AI score0.0045EPSS
Exploits1References1
Veracode
Veracode
added 2022/09/19 3:43 p.m.41 views

Restriction Bypass

chromium is vulnerable to use after free. The vulnerability exists because an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page...

5.4CVSS6.6AI score0.00581EPSS
Exploits0References10Affected Software2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2020:3737-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.03003EPSS
Exploits1References2
OSV
OSV
added 2020/12/09 5:21 p.m.6 views

SUSE-SU-2020:3737-1 Security update for python-pip, python-scripttest

This update for python-pip, python-scripttest fixes the following issues: - Update in SLE-15 bsc1175297, jscECO-3035, jscPM-2318 python-pip was updated to 20.0.2: Fix a regression in generation of compatibility tags Rename an internal module, to avoid ImportErrors due to improper uninstallation...

7.5CVSS7.7AI score0.03003EPSS
Exploits1References4
Microsoft KB
Microsoft KB
added 2018/09/27 12:0 a.m.5 views

July 31, 2017—KB4032188 (OS Build 15063.502)

July 31, 2017—KB4032188 OS Build 15063.502 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue that causes a Microsoft Installer MSI application to fail for standard non-admin...

6.8AI score
Exploits0
Rows per page
Query Builder