Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/19 12:00 a.m.•16 views

SUSE SLES15: libpython2_7-1_0 / python / python-base / python-curses / etc (SUSE-SU-2026:3635-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3635-1 advisory. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used...

8.7CVSS6.4AI score0.01351EPSS
SaveExploits1References33
SUSE Linux
SUSE Linux
•added 2026/08/12 12:05 p.m.•16 views

Security update for python3

This update for python3 fixes the following issues: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1703: files may be extracted outside the installation directory when installing and...

8.7CVSS6.4AI score0.00781EPSS
SaveExploits2References46
SUSE CVE
SUSE CVE
•added 2026/02/03 12:24 a.m.•15 views

SUSE CVE-2026-1703

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

3.1CVSS6.3AI score0.00443EPSS
SaveExploits1References19
OSV
OSV
•added 2026/02/02 3:16 p.m.•15 views

AZL-76599 CVE-2026-1703 affecting package python3 3.12.9-9

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS6.3AI score0.00443EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/02/02 2:43 p.m.•16 views

CVE-2026-1703

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS6.3AI score0.00443EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/02 2:43 p.m.•13 views

CVE-2026-1703 Limited path traversal when installing wheel archives

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS6.3AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•1 views

CVE-2026-1703: Improper Limitation of a Pathname to a Restricted Directory

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS5.7AI score0.00443EPSS
SaveExploits1References1
Rows per page
Query Builder