76 results · Feed
-
High 7.5
A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…
-
High 8.2
Execution with Unnecessary Privileges in ipython
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not p…
-
Medium 5.7
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or …
-
Medium 5.9CVE-2021-23336 EPSS 41%
Web Cache Poisoning
The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…
-
Unscored —
Visual Studio Code Python Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. I…
-
Unscored —
Visual Studio Code Python Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current use…
-
Medium 5.3
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …
-
Medium 6.5
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the di…
-
Unscored —
The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, …
-
Low 3.6CVE-2018-1000030 Public exploit
Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14…
-
Unscored —
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWS…
-
Unscored —
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringo…
-
Unscored —
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an …
-
Unscored —CVE-2016-5699 Public exploit
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) bef…
-
Unscored —
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3…
-
Unscored —
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wild…
-
Unscored —
Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive inform…
-
Unscored —
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x bef…
-
Unscored —
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restrict…
-
Unscored —
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7…
-
Unscored —
The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does n…
-
Unscored —
Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later ver…
-
Unscored —
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent att…
-
Unscored —
Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via…
-
Unscored —
Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow cont…
-
Unscored —
Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a d…
-
Unscored —
Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent atta…
-
Unscored —
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via …
-
Unscored —
Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of s…
-
Unscored —
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a…
-
Unscored —
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…
-
Critical 9.8
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…
-
Unscored —
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to ca…
-
Unscored —CVE-2006-1542 Public exploit
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, all…
-
Unscored —
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use t…
-
Unscored —
os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow lo…