Lucene search
+L

385 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2011-0025

Malware in sbrugna...

1.2CVSS5.8AI score0.0031EPSS
SaveExploits0References13
OSV
OSV
•added 2025/06/19 1:15 a.m.•10 views

AZL-77823 CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2

urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attemptin...

6.1CVSS6.2AI score0.00474EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/19 1:15 a.m.•15 views

AZL-64218 CVE-2025-50181 affecting package python-virtualenv for versions less than 20.26.6-2

urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attemptin...

6.1CVSS6.5AI score0.00474EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•5 views

TencentOS Server 4: python-virtualenv (TSSA-2025:0386)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0386 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

8.4CVSS7.3AI score0.01572EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/05/26 12:00 a.m.•8 views

Fedora: Security Advisory (FEDORA-2024-89014f5794)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 8:06 p.m.•15 views

CVE-2021-3769

Vulnerability in pygmalion, pygmalion-virtualenv and refined themes Description: these themes use print -P on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability...

10CVSS6.8AI score0.00971EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/20 12:00 a.m.•17 views

Azure Linux 3.0 Security Update: python-virtualenv (CVE-2024-53899)

The version of python-virtualenv installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53899 advisory. - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual...

8.4CVSS7.3AI score0.01572EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/20 12:00 a.m.•25 views

CBL Mariner 2.0 Security Update: python-virtualenv (CVE-2024-53899)

The version of python-virtualenv installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53899 advisory. - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual...

8.4CVSS7.3AI score0.01572EPSS
SaveExploits1References2
CBLMariner
CBLMariner
•added 2025/03/15 3:07 p.m.•20 views

CVE-2024-53899 affecting package python-virtualenv for versions less than 20.26.6-1

CVE-2024-53899 affecting package python-virtualenv for versions less than 20.26.6-1. An upgraded version of the package is available that resolves this issue...

8.4CVSS6.9AI score0.01572EPSS
SaveExploits1
OSV
OSV
•added 2025/03/07 11:08 a.m.•11 views

OESA-2025-1241 python-virtualenv security update

Virtualenv is a tool to create isolated Python environments. Since Python 3.3, a subset of it has been integrated into the standard library under the venv module. Note though, that the venv module does not offer all features of this library e.g. cannot create bootstrap scripts, cannot create...

7.8CVSS7.3AI score0.01572EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2025/02/25 1:52 p.m.•37 views

USN-7271-2: virtualenv vulnerability

USN-7271-1 fixed a vulnerability in virtualenv. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute...

8.4CVSS8.1AI score0.01572EPSS
SaveExploits1
OSV
OSV
•added 2025/02/25 1:52 p.m.•14 views

USN-7271-2 python-virtualenv vulnerability

USN-7271-1 fixed a vulnerability in virtualenv. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute...

8.4CVSS7.4AI score0.01572EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/02/25 12:00 a.m.•6 views

Ubuntu: Security Advisory (USN-7271-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.7AI score0.01572EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/02/25 12:00 a.m.•13 views

Ubuntu 24.04 LTS : virtualenv vulnerability (USN-7271-2)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7271-2 advisory. USN-7271-1 fixed a vulnerability in virtualenv. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the preceding descripti...

8.4CVSS7.7AI score0.01572EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/02/19 12:00 a.m.•12 views

Ubuntu: Security Advisory (USN-7271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.7AI score0.01572EPSS
SaveExploits1References2
OSV
OSV
•added 2025/02/18 1:32 p.m.•13 views

USN-7271-1 python-virtualenv vulnerability

It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute arbitrary code...

8.4CVSS5.8AI score0.01572EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2025/02/18 1:32 p.m.•23 views

USN-7271-1: virtualenv vulnerability

It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute arbitrary code...

8.4CVSS7.7AI score0.01572EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/02/18 12:00 a.m.•9 views

Ubuntu 20.04 LTS / 22.04 LTS : virtualenv vulnerability (USN-7271-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7271-1 advisory. It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute...

8.4CVSS8.2AI score0.01572EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/02/05 2:09 p.m.•16 views

CVE-2020-11073

In Autoswitch Python Virtualenv before version 0.16.0, a user who enters a directory with a malicious .venv file could run arbitrary code without any user interaction. This is fixed in version: 1.16.0...

7.9CVSS7.2AI score0.00542EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/02/05 12:00 a.m.•26 views

Amazon Linux 2023 : python3-virtualenv (ALAS2023-2025-831)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-831 advisory. virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as...

8.4CVSS7.3AI score0.01572EPSS
SaveExploits1References4
Rows per page
Query Builder