Lucene search
+L

385 matches found

AlmaLinux
AlmaLinux
•added 2024/12/11 12:00 a.m.•25 views

Important: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.4CVSS7.3AI score0.01572EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/12/11 12:00 a.m.•11 views

RHEL 8 : python36:3.6 (RHSA-2024:10953)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10953 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

8.4CVSS7.8AI score0.01572EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/12/03 12:00 a.m.•17 views

openSUSE Security Advisory (SUSE-SU-2024:4143-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS8.3AI score0.01572EPSS
SaveExploits1References5
SUSE Linux
SUSE Linux
•added 2024/12/02 7:50 p.m.•9 views

Security update for python3-virtualenv

This update for python3-virtualenv fixes the following issues: Security issue fixed: CVE-2024-53899: Fixed a command injection through activation scripts bsc1233706 Non-security issue fixed: Relax version requirements that cannot be provided bsc1232072 Patch Instructions: To install this SUSE...

7.8CVSS8.7AI score0.01572EPSS
SaveExploits1References6
OSV
OSV
•added 2024/12/02 7:50 p.m.•14 views

SUSE-SU-2024:4143-1 Security update for python3-virtualenv

This update for python3-virtualenv fixes the following issues: Security issue fixed: - CVE-2024-53899: Fixed a command injection through activation scripts bsc1233706 Non-security issue fixed: - Relax version requirements that cannot be provided bsc1232072...

8.4CVSS8AI score0.01572EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/11/29 12:00 a.m.•11 views

SUSE: Security Advisory (SUSE-SU-2024:4093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS8.3AI score0.01572EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2024/11/29 12:00 a.m.•26 views

openSUSE Security Advisory (SUSE-SU-2024:4093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS8.3AI score0.01572EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2024/11/28 10:57 a.m.•13 views

Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: CVE-2024-53899: Fixed a command injection through activation scripts bsc1233706 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you c...

7.8CVSS8.7AI score0.01572EPSS
SaveExploits1References4
OSV
OSV
•added 2024/11/28 10:57 a.m.•16 views

SUSE-SU-2024:4093-1 Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: - CVE-2024-53899: Fixed a command injection through activation scripts bsc1233706...

8.4CVSS8AI score0.01572EPSS
SaveExploits1References3
OSV
OSV
•added 2024/11/27 7:23 p.m.•28 views

BIT-VIRTUALENV-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.4CVSS6.9AI score0.01572EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2024/11/26 3:47 a.m.•11 views

SUSE CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

7.8CVSS8.6AI score0.01572EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2024/11/25 7:22 p.m.•23 views

CVE-2024-53899

A flaw was found in the virtualenv Python package. Due to the improper handling of quotes in magic template strings, the virtual environment activation script is vulnerable to OS command injection,leading to the loss of confidentiality,integrity and availability of the system. Mitigation Mitigati...

7.8CVSS6.5AI score0.01572EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2024/11/24 6:31 p.m.•21 views

virtualenv allows command injection through activation scripts for a virtual environment

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.4CVSS7.5AI score0.01572EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2024/11/24 4:15 p.m.•13 views

AZL-53417 CVE-2024-53899 affecting package python-virtualenv for versions less than 20.25.0-3

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

7.8CVSS7.4AI score0.01572EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/24 4:15 p.m.•13 views

AZL-53645 CVE-2024-53899 affecting package python-virtualenv for versions less than 20.26.6-1

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

7.8CVSS7.4AI score0.01572EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/24 4:15 p.m.•34 views

CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.4CVSS0.01572EPSS
SaveExploits1References3
OSV
OSV
•added 2024/11/24 4:15 p.m.•5 views

DEBIAN-CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

7.8CVSS7.7AI score0.01572EPSS
SaveExploits1References1
PyPA
PyPA
•added 2024/11/24 4:15 p.m.•14 views

PYSEC-2024-187

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

9.8CVSS7.6AI score0.01572EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/11/24 4:15 p.m.•22 views

PYSEC-2024-187

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

9.8CVSS7.7AI score0.01572EPSS
SaveExploits1References4
OSV
OSV
•added 2024/11/24 4:15 p.m.•19 views

UBUNTU-CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...

8.4CVSS7.2AI score0.01572EPSS
SaveExploits1References7
Rows per page
Query Builder