Lucene search
K

99 matches found

OSV
OSV
added 6 days ago7 views

RLSA-2026:19064 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.1CVSS7.7AI score0.00205EPSS
Exploits1References13
Patchstack
Patchstack
added 2026/05/01 9:31 a.m.2 views

WordPress Menu Image, Icons made easy plugin <= 3.12 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Menu Image, Icons made easy versions = 3.12...

6.1CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.0 views

SUSE SLES16 Security Update : google-cloud-sap-agent (SUSE-SU-2026:21210-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:21210-1 advisory. This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 bsc1259816: - CVE-2026-33186:...

9.1CVSS5.9AI score0.0002EPSS
Exploits1References5
OSV
OSV
added 2026/04/17 7:55 a.m.1 views

SUSE-SU-2026:21210-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 bsc1259816: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260265. Changes for google-cloud-sap-agent: Collect...

9.1CVSS5.8AI score0.0002EPSS
Exploits1References4
Amazon
Amazon
added 2026/04/13 12:0 a.m.1 views

Important: python3.12

Issue Overview: The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open. CVE-2026-4519 Affected Packages:...

7CVSS5.8AI score0.00015EPSS
Exploits0
SUSE Linux
SUSE Linux
added 2026/04/07 9:25 a.m.3 views

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 bsc1259816: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260265. Changelog: Collect WLM metric...

8.6CVSS5.9AI score0.0002EPSS
Exploits1References6
OSV
OSV
added 2026/04/07 9:25 a.m.0 views

SUSE-SU-2026:1194-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 bsc1259816: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260265. Changelog: Collect WLM metric...

9.1CVSS5.8AI score0.0002EPSS
Exploits1References4
Fedora
Fedora
added 2026/03/31 12:27 a.m.3 views

[SECURITY] Fedora 44 Update: python3.12-3.12.13-2.fc44

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

7CVSS5.9AI score0.00015EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/03/12 12:0 a.m.4 views

MiracleLinux 9 : python3.12-3.12.12-4.el9_7.1 (AXSA:2026-294:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-294:08 advisory. cpython: IMAP command injection in user-controlled commands CVE-2025-15366 cpython: POP3 command injection in user-controlled commands CVE-2025-15367...

6CVSS7.2AI score0.00104EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/17 8:37 p.m.23 views

CVE-2025-36376 IBM Security QRadar EDR Software has multiple vulnerabilities

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system...

6.3CVSS0.00059EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/17 8:37 p.m.1 views

CVE-2025-36376 IBM Security QRadar EDR Software has multiple vulnerabilities

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.5AI score0.00059EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/13 12:0 a.m.3 views

MiracleLinux 8 : python3.12-3.12.12-2.el8_10 (AXSA:2026-167:07)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-167:07 advisory. cpython: Excessive read buffering DoS in http.client CVE-2025-13836 Tenable has extracted the preceding description block directly from the MiracleLinux...

7.5CVSS7.3AI score0.00215EPSS
Exploits0References2
Rockylinux
Rockylinux
added 2026/02/11 9:10 a.m.3 views

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

7.5CVSS5.7AI score0.00215EPSS
Exploits0
AlmaLinux
AlmaLinux
added 2026/02/04 12:0 a.m.3 views

Important: python3.12-wheel security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.1CVSS5.7AI score0.00015EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002567 advisory. The handleinvept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service NULL pointer...

5.5CVSS6.5AI score0.00038EPSS
Exploits0References5
OSV
OSV
added 2025/10/30 5:15 p.m.1 views

CVE-2025-12060

The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...

8.9CVSS7.5AI score
Exploits0References2
NVD
NVD
added 2025/10/30 5:15 p.m.6 views

CVE-2025-12060

The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...

8.9CVSS0.0011EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/20 12:0 a.m.2 views

Fedora 42 : python3.12 (2025-489e2f5272)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-489e2f5272 advisory. Update to 3.12.12 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

7.5CVSS6.5AI score0.01007EPSS
Exploits0References4
Rockylinux
Rockylinux
added 2025/10/10 5:50 a.m.3 views

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

7.5CVSS6.9AI score0.01007EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-38714

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00101EPSS
Exploits1References2
Rows per page
Query Builder