Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"
Python

Pythonвысокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.

Релизный цикл, информация об уязвимостях

Продукт: Python
Вендор: python

График релизов

3.103.113.123.133.1420212022202320242025202620272028202920302031

Недавние уязвимости Python

Количество 887

suse-cvrf логотип

SUSE-SU-2022:2174-1

больше 3 лет назад

Security update for python39

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2166-1

больше 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2147-1

больше 3 лет назад

Security update for python36

EPSS: Низкий
github логотип

GHSA-w84r-7gx4-7v92

больше 3 лет назад

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2017-20052

больше 3 лет назад

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 5
EPSS: Низкий
ubuntu логотип

CVE-2017-20052

больше 3 лет назад

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 5
EPSS: Низкий
github логотип

GHSA-hr7v-m862-8hh8

больше 3 лет назад

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-6qp6-q95v-x2qw

больше 3 лет назад

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

CVSS3: 5.7
EPSS: Низкий
github логотип

GHSA-cxqv-r2cc-r9c9

больше 3 лет назад

Improper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. IP address octects are left stripped instead of evaluated as valid IP addresses.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-39mj-fpg2-3jrg

больше 3 лет назад

StackStorm st2 Infinite Loop Condition

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
suse-cvrf логотип
SUSE-SU-2022:2174-1

Security update for python39

1%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2166-1

Security update for python3

1%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2147-1

Security update for python36

1%
Низкий
больше 3 лет назад
github логотип
GHSA-w84r-7gx4-7v92

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 7.8
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 5
0%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 5
0%
Низкий
больше 3 лет назад
github логотип
GHSA-hr7v-m862-8hh8

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

CVSS3: 7.5
0%
Низкий
больше 3 лет назад
github логотип
GHSA-6qp6-q95v-x2qw

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

CVSS3: 5.7
0%
Низкий
больше 3 лет назад
github логотип
GHSA-cxqv-r2cc-r9c9

Improper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. IP address octects are left stripped instead of evaluated as valid IP addresses.

CVSS3: 9.8
2%
Низкий
больше 3 лет назад
github логотип
GHSA-39mj-fpg2-3jrg

StackStorm st2 Infinite Loop Condition

CVSS3: 7.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу


Поделиться