Lucene search
+L
PypaMost viewed

7249 matches found

PyPA
PyPA
added 2014/09/29 10:55 p.m.11 views

PYSEC-2014-115

The urlopen function in pym/portage/util/urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate...

9.3CVSS6.8AI score0.01557EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2014/08/26 2:55 p.m.11 views

PYSEC-2014-4

The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // slash slash in a URL, which triggers a scheme-relative URL...

5.8CVSS7AI score0.02295EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2014/08/25 2:55 p.m.11 views

PYSEC-2014-108

The V3 API in OpenStack Identity Keystone 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issuedat value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification 1 GET or 2 HEAD request to v3/auth/tokens/...

4.9CVSS6.8AI score0.01515EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/05/27 1:55 p.m.11 views

PYSEC-2014-110

Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...

3.5CVSS5.7AI score0.03505EPSS
SaveExploits2References10Affected Software1
PyPA
PyPA
added 2014/05/02 2:55 p.m.11 views

PYSEC-2014-65

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...

5CVSS7AI score0.02138EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2014/04/27 8:55 p.m.11 views

PYSEC-2014-87

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS7.9AI score0.11597EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2014/04/15 2:55 p.m.11 views

PYSEC-2014-106

The V3 API in OpenStack Identity Keystone 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service CPU consumption via a large number of the same authentication method in a request, aka "authentication chaining."...

7.8CVSS6.9AI score0.03155EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2014/04/01 6:35 a.m.11 views

PYSEC-2014-105

The memcache token backend in OpenStack Identity Keystone 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being...

5CVSS6.8AI score0.01367EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2014/03/11 7:37 p.m.11 views

PYSEC-2014-58

The WYSIWYG component wysiwyg.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message...

4.3CVSS6.6AI score0.01216EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/03/11 7:37 p.m.11 views

PYSEC-2014-60

The object manager implementation objectmanager.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request...

5CVSS6.5AI score0.01382EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/02/08 12:55 a.m.11 views

PYSEC-2014-88

python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate...

4.3CVSS6.8AI score0.00896EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2014/01/28 12:55 a.m.11 views

PYSEC-2014-95

Race condition in the xdg.BaseDirectory.getruntimedir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once th...

3.3CVSS6.7AI score0.00317EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2013/09/27 10:8 a.m.11 views

PYSEC-2013-34

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to 1 remotestorage.py, 2 storage.py, 3 render/datalib.py, and 4 whitelist/views.py, a different vulnerability than CVE-2013-5093...

6.8CVSS8.1AI score0.38668EPSS
SaveExploits5References3Affected Software1
PyPA
PyPA
added 2013/09/16 7:14 p.m.11 views

PYSEC-2013-20

Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWEDINCLUDEROOTS setting followed by a .. dot dot in a ssi template tag...

5CVSS6.9AI score0.03208EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2013/09/16 7:14 p.m.11 views

PYSEC-2013-35

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

2.1CVSS6.2AI score0.00406EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2013/03/22 9:55 p.m.11 views

PYSEC-2013-39

OpenStack Keystone Folsom 2012.2 does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token...

6.8CVSS7AI score0.02608EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2013/02/24 9:55 p.m.11 views

PYSEC-2013-37

store/swift.py in OpenStack Glance Essex 2012.1, Folsom 2012.2 before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive...

4CVSS6.6AI score0.02989EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2013/01/03 1:55 a.m.11 views

PYSEC-2013-5

Directory traversal vulnerability in the doattachmentmove function in the AttachFile action action/AttachFile.py in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name...

6.4CVSS7.1AI score0.04052EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2012/12/26 10:55 p.m.11 views

PYSEC-2012-42

OpenStack Compute Nova Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume PV content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume L...

4.3CVSS5.8AI score0.02011EPSS
SaveExploits0References11
PyPA
PyPA
added 2012/09/15 5:55 p.m.11 views

PYSEC-2012-1

Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors...

4.3CVSS7AI score0.02467EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2012/08/20 6:55 p.m.11 views

PYSEC-2012-21

virt/disk/api.py in OpenStack Compute Nova 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an...

5.5CVSS6.9AI score0.02604EPSS
SaveExploits2References11Affected Software1
PyPA
PyPA
added 2012/07/31 5:55 p.m.11 views

PYSEC-2012-3

The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...

5CVSS6.8AI score0.02663EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2012/06/21 3:55 p.m.11 views

PYSEC-2012-37

The 1 EC2 and 2 OS APIs in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restriction...

4.3CVSS7AI score0.02626EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2012/03/21 10:11 a.m.11 views

PYSEC-2012-27

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus...

4.3CVSS6.9AI score0.91709EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2012/03/19 7:55 p.m.11 views

PYSEC-2012-31

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat...

3.3CVSS6.8AI score0.00309EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2011/12/31 1:55 a.m.11 views

PYSEC-2011-23

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

1.2CVSS6.7AI score0.00324EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2011/10/19 10:55 a.m.11 views

PYSEC-2011-4

Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request...

5CVSS6.9AI score0.02323EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2011/10/19 10:55 a.m.11 views

PYSEC-2011-2

The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service resource consumption via a URL associated with...

6.4CVSS7AI score0.041EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2011/06/06 7:55 p.m.11 views

PYSEC-2011-15

Cross-site scripting XSS vulnerability in the safehtml filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422...

4.3CVSS6AI score0.01965EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2010/07/02 7:0 p.m.11 views

PYSEC-2010-1

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...

4.3CVSS5.6AI score0.01824EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2009/08/07 7:30 p.m.11 views

PYSEC-2009-8

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

6.5CVSS7.8AI score0.02163EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2009/02/03 11:30 a.m.11 views

PYSEC-2009-16

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11, and GStreamer Plug-ins aka gstreamer-plugins 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample aka...

9.3CVSS6.4AI score0.07206EPSS
SaveExploits1References22Affected Software1
PyPA
PyPA
added 2009/02/02 7:30 p.m.11 views

PYSEC-2009-15

Array index error in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted Sync Sample aka stss atom da...

9.3CVSS6.2AI score0.06483EPSS
SaveExploits1References18Affected Software1
PyPA
PyPA
added 2008/09/04 5:41 p.m.11 views

PYSEC-2008-2

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

5.8CVSS7.3AI score0.00931EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2008/07/30 6:41 p.m.11 views

PYSEC-2008-13

Multiple cross-site scripting XSS vulnerabilities in macro/AdvancedSearch.py in moin and MoinMoin 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.0209EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2008/05/23 3:32 p.m.11 views

PYSEC-2008-1

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS6AI score0.01323EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2008/04/25 6:5 a.m.11 views

PYSEC-2008-12

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

6.8CVSS7.2AI score0.01656EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2008/03/20 12:44 a.m.11 views

PYSEC-2008-15

Withdrawn as duplicate of PYSEC-2008-14. Multiple cross-site request forgery CSRF vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to 1 add arbitrary accounts via the joinform page and 2 change the privileges of arbitrary groups via the prefsgroupsoverview page...

4.3CVSS6AI score0.00642EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2006/12/07 11:28 p.m.11 views

PYSEC-2006-10

Withdrawn as duplicate of PYSEC-2006-6. Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."...

4.3CVSS6AI score0.00997EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 6 days ago10 views

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

SummaryAn out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. ImpactAn attacker controlled server, or possibly an accidental response could trigger a DoS in the client. WorkaroundIf unable to upgrade, the Python parser is unaffect...

7.1CVSS5.6AI score0.003EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 6 days ago10 views

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

SummaryThe client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated. ImpactA client may unexpectedly decompress WebSocket frames when explicitly opted out. This could lead to additional CPU/memory consumption, but is unlikely to be...

6.9CVSS5.4AI score0.00302EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 6 days ago10 views

Thumbor has path traversal via post-validation URL decoding bypass in file_loader

The fileloader performs unquote on the file path AFTER the abspath + startswith security check. An attacker can use percent-encoded path traversal sequences %2e%2e for .. that pass the security check as literal directory names, but are then decoded to actual .. traversal sequences. Affected...

8.7CVSS5.5AI score0.00357EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 6 days ago10 views

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode

Summarynltk.pathsec provides an SSRF filter that NLTK documents as a security control, blocking loopback, private, link-local, and multicast ranges including obfuscated forms and recommending strict ENFORCE mode for security-sensitive environments. The filter is bypassable by DNS rebinding:...

8.6CVSS5.7AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 6 days ago10 views

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

Summaryconsultgeminiwithfiles in inline mode read any file path supplied inthe files argument without confining it to the working directory, thenforwarded the contents to the Gemini CLI. Because the caller also controlsquery, the file contents are echoed back through the Gemini round-tripand sent...

6.2CVSS6.1AI score0.00151EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 6 days ago10 views

Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex

SummaryReviewsCorpusReader extracts feature annotations of the form label followed by a bracketed signed digit e.g. a label then +2 from each review line, using the module-level FEATURES regex. The feature-label sub-pattern is unbounded — an optional greedy run of word-plus-whitespace groups...

7.5CVSS5.5AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 6 days ago10 views

Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS

SummaryThumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C code triggers undefined behavior; on x8664 this reliably results in a...

7.5CVSS5.7AI score0.00417EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 6 days ago10 views

Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature

HMAC validation bypass via multiple .replace calls when removing URL signature SummaryThumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can...

8.2CVSS5.5AI score0.00208EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 6 days ago10 views

Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot

SummaryThe ALLOWEDSOURCES configuration is meant to restrict which hosts Thumbor's HTTP loader may fetch images from. Plain-string entries in that list the overwhelming majority of real-world and documented configurations are passed directly to re.match without escaping. Because . is a regex...

8.2CVSS5.6AI score0.00287EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 6 days ago10 views

Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation

SummaryThe HTTP modules that DO call the SSRF guard http.get, http.request, http.batch validate only the initial URL, then issue the request with aiohttp's default allowredirects=True and perform no per-hop revalidation. An attacker hosts a public URL that 302-redirects to an internal address; th...

8.5CVSS5.5AI score0.00236EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 6 days ago10 views

Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted

SummaryThe capability policy denies the env.get and env.loaddotenv modules by default, with the stated reason that they read arbitrary host environment variables API keys, DSNs and are a secret-exfil risk. But the workflow engine's variable resolver expands $env.VAR for any environment variable...

8.6CVSS5.9AI score0.00339EPSS
SaveExploits0References7Affected Software1
Total number of security vulnerabilities5000