Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"
Python

Pythonвысокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.

Релизный цикл, информация об уязвимостях

Продукт: Python
Вендор: python

График релизов

3.103.113.123.133.1420212022202320242025202620272028202920302031

Недавние уязвимости Python

Количество 924

fstec логотип

BDU:2021-03533

почти 8 лет назад

Уязвимость библиотеки library/glob.html пакета программ Python, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:0934-1

почти 8 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:0768-1

около 8 лет назад

Security update for python

EPSS: Низкий
redhat логотип

CVE-2018-1060

около 8 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 4.3
EPSS: Низкий
redhat логотип

CVE-2018-1061

около 8 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2018-1000117

около 8 лет назад

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.

CVSS3: 6.7
EPSS: Низкий
debian логотип

CVE-2018-1000117

около 8 лет назад

Python Software Foundation CPython version From 3.2 until 3.6.4 on Win ...

CVSS3: 6.7
EPSS: Низкий
ubuntu логотип

CVE-2018-1000117

около 8 лет назад

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.

CVSS3: 6.7
EPSS: Низкий
nvd логотип

CVE-2017-18207

около 8 лет назад

The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2017-18207

около 8 лет назад

The Wave_read._read_fmt_chunk function in Lib/wave.py in Python throug ...

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
fstec логотип
BDU:2021-03533

Уязвимость библиотеки library/glob.html пакета программ Python, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 7.5
2%
Низкий
почти 8 лет назад
suse-cvrf логотип
SUSE-SU-2018:0934-1

Security update for python3

1%
Низкий
почти 8 лет назад
suse-cvrf логотип
SUSE-SU-2018:0768-1

Security update for python

4%
Низкий
около 8 лет назад
redhat логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 4.3
1%
Низкий
около 8 лет назад
redhat логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
2%
Низкий
около 8 лет назад
nvd логотип
CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.

CVSS3: 6.7
0%
Низкий
около 8 лет назад
debian логотип
CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Win ...

CVSS3: 6.7
0%
Низкий
около 8 лет назад
ubuntu логотип
CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.

CVSS3: 6.7
0%
Низкий
около 8 лет назад
nvd логотип
CVE-2017-18207

The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.

CVSS3: 6.5
1%
Низкий
около 8 лет назад
debian логотип
CVE-2017-18207

The Wave_read._read_fmt_chunk function in Lib/wave.py in Python throug ...

CVSS3: 6.5
1%
Низкий
около 8 лет назад

Уязвимостей на страницу


Поделиться