Поиск уязвимостей
Количество 110
Количество 110
GHSA-mh6q-v4mp-2cc7
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.
ELSA-2024-4779
ELSA-2024-4779: python3 security update (LOW)
ELSA-2024-4766
ELSA-2024-4766: python3 security update (LOW)
BDU:2024-05196
Уязвимость классов ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address и ipaddress.IPv6Network модуля ipaddress интерпретатора языка программирования Python (CPython), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
SUSE-SU-2024:2280-1
Security update for python39
SUSE-SU-2024:2274-1
Security update for python39
ROS-20260505-80-0119
Уязвимость python3.12
ROS-20260505-80-0118
Уязвимость python3.11
ROS-20260505-80-0117
Уязвимость python3.10
ROS-20260505-80-0116
Уязвимость python3.9
ROS-20260505-80-0115
Уязвимость python3.8
ROS-20260505-73-0079
Уязвимость python3.12
ROS-20260505-73-0078
Уязвимость python3.11
ROS-20260505-73-0077
Уязвимость python3.10
ROS-20240917-08
Уязвимость python3
SUSE-SU-2024:2572-1
Security update for python312
CVE-2024-6345
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
CVE-2024-6345
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
CVE-2024-6345
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
CVE-2024-6345
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mh6q-v4mp-2cc7 The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior. | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
| ELSA-2024-4779 ELSA-2024-4779: python3 security update (LOW) | 1% Низкий | больше 2 лет назад | |
| ELSA-2024-4766 ELSA-2024-4766: python3 security update (LOW) | 1% Низкий | больше 2 лет назад | |
 | BDU:2024-05196 Уязвимость классов ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address и ipaddress.IPv6Network модуля ipaddress интерпретатора языка программирования Python (CPython), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.7 | 1% Низкий | почти 3 года назад |
 | SUSE-SU-2024:2280-1 Security update for python39 | больше 2 лет назад | ||
| SUSE-SU-2024:2274-1 Security update for python39 | больше 2 лет назад | ||
 | ROS-20260505-80-0119 Уязвимость python3.12 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-80-0118 Уязвимость python3.11 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-80-0117 Уязвимость python3.10 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-80-0116 Уязвимость python3.9 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-80-0115 Уязвимость python3.8 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-73-0079 Уязвимость python3.12 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-73-0078 Уязвимость python3.11 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20260505-73-0077 Уязвимость python3.10 | CVSS3: 3.7 | 1% Низкий | 6 месяцев назад |
| ROS-20240917-08 Уязвимость python3 | CVSS3: 3.7 | 1% Низкий | около 2 лет назад |
| SUSE-SU-2024:2572-1 Security update for python312 | больше 2 лет назад | ||
 | CVE-2024-6345 A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0. | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-6345 A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0. | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-6345 A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0. | CVSS3: 8.8 | 2% Низкий | больше 2 лет назад |
 | CVSS3: 8.8 | 2% Низкий | около 2 лет назад |
Уязвимостей на страницу