python2

6 results · Feed

• Medium 5.9
  CVE-2021-23336 EPSS 41%

  Web Cache Poisoning

  The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…

  python-django python-django python3.4 python3.5 Debian Ubuntu Azure Linux Alpine
  Feb 15, 2021
• Medium 5.5
  CVE-2019-20907

  In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  Jul 13, 2020
• Unscored —
  CVE-2019-9674

  Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Feb 4, 2020
• Unscored —
  CVE-2017-18207

  The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, …

  python3.4 python3.5 python2.7 python3.6 Ubuntu Azure Linux
  Mar 1, 2018
• Unscored —
  CVE-2017-17522

  Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWS…

  python-py jython python2 Debian Azure Linux
  Dec 14, 2017
• Critical 9.8
  CVE-2007-4559 Public exploit EPSS 27%

  Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…

  python3.4 python3.5 python2.7 python3.6 Ubuntu Azure Linux
  Aug 28, 2007