Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"

Количество 870

Количество 870

ubuntu логотип

CVE-2006-4980

больше 18 лет назад

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

CVSS2: 7.5
EPSS: Низкий
redhat логотип

CVE-2006-4980

почти 19 лет назад

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

EPSS: Низкий
nvd логотип

CVE-2006-4980

больше 18 лет назад

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2006-4980

больше 18 лет назад

Buffer overflow in the repr function in Python 2.3 through 2.6 before ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2006-1542

около 19 лет назад

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

CVSS2: 3.7
EPSS: Низкий
redhat логотип

CVE-2006-1542

почти 20 лет назад

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

EPSS: Низкий
nvd логотип

CVE-2006-1542

около 19 лет назад

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

CVSS2: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2005-0089

около 20 лет назад

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

CVSS2: 7.5
EPSS: Низкий
redhat логотип

CVE-2005-0089

больше 20 лет назад

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

EPSS: Низкий
nvd логотип

CVE-2005-0089

около 20 лет назад

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2005-0089

около 20 лет назад

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, ...

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2004-0150

около 21 года назад

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2004-0150

около 21 года назад

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2 ...

CVSS2: 7.5
EPSS: Низкий
redhat логотип

CVE-2002-1119

почти 23 года назад

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

EPSS: Низкий
nvd логотип

CVE-2002-1119

больше 22 лет назад

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

CVSS2: 4.6
EPSS: Низкий
debian логотип

CVE-2002-1119

больше 22 лет назад

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary f ...

CVSS2: 4.6
EPSS: Низкий
fstec логотип

BDU:2024-08619

больше 1 года назад

Уязвимость интерпретатора языка программирования Python, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю повысить свои привилегии

CVSS3: 7
EPSS: Низкий
fstec логотип

BDU:2024-08617

около 1 года назад

Уязвимость функции mkdtemp интерпретатора языка программирования Python, позволяющая нарушителю повысить свои привилегии

CVSS3: 7.1
EPSS: Низкий
fstec логотип

BDU:2023-04977

около 2 лет назад

Уязвимость функции email.utils.parseaddr интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2022-03163

почти 13 лет назад

Уязвимость интерпретатора языка программирования Python, вызванная ошибкой использования памяти после её освобождения, позволяющая нарушителю выполнить команды операционной системы

CVSS3: 5.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2006-4980

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

CVSS2: 7.5
1%
Низкий
больше 18 лет назад
redhat логотип
CVE-2006-4980

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

1%
Низкий
почти 19 лет назад
nvd логотип
CVE-2006-4980

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

CVSS2: 7.5
1%
Низкий
больше 18 лет назад
debian логотип
CVE-2006-4980

Buffer overflow in the repr function in Python 2.3 through 2.6 before ...

CVSS2: 7.5
1%
Низкий
больше 18 лет назад
ubuntu логотип
CVE-2006-1542

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

CVSS2: 3.7
0%
Низкий
около 19 лет назад
redhat логотип
CVE-2006-1542

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

0%
Низкий
почти 20 лет назад
nvd логотип
CVE-2006-1542

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

CVSS2: 3.7
0%
Низкий
около 19 лет назад
ubuntu логотип
CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

CVSS2: 7.5
10%
Низкий
около 20 лет назад
redhat логотип
CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

10%
Низкий
больше 20 лет назад
nvd логотип
CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

CVSS2: 7.5
10%
Низкий
около 20 лет назад
debian логотип
CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, ...

CVSS2: 7.5
10%
Низкий
около 20 лет назад
nvd логотип
CVE-2004-0150

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.

CVSS2: 7.5
9%
Низкий
около 21 года назад
debian логотип
CVE-2004-0150

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2 ...

CVSS2: 7.5
9%
Низкий
около 21 года назад
redhat логотип
CVE-2002-1119

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

0%
Низкий
почти 23 года назад
nvd логотип
CVE-2002-1119

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

CVSS2: 4.6
0%
Низкий
больше 22 лет назад
debian логотип
CVE-2002-1119

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary f ...

CVSS2: 4.6
0%
Низкий
больше 22 лет назад
fstec логотип
BDU:2024-08619

Уязвимость интерпретатора языка программирования Python, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю повысить свои привилегии

CVSS3: 7
1%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-08617

Уязвимость функции mkdtemp интерпретатора языка программирования Python, позволяющая нарушителю повысить свои привилегии

CVSS3: 7.1
0%
Низкий
около 1 года назад
fstec логотип
BDU:2023-04977

Уязвимость функции email.utils.parseaddr интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2022-03163

Уязвимость интерпретатора языка программирования Python, вызванная ошибкой использования памяти после её освобождения, позволяющая нарушителю выполнить команды операционной системы

CVSS3: 5.9
почти 13 лет назад

Уязвимостей на страницу