Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"

Количество 870

Количество 870

nvd логотип

CVE-2019-9674

больше 5 лет назад

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-9674

больше 5 лет назад

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to caus ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-15903

почти 6 лет назад

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2019-15903

почти 6 лет назад

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-15903

почти 6 лет назад

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-15903

почти 6 лет назад

In libexpat before 2.2.8, crafted XML input could fool the parser into ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-12900

около 6 лет назад

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2019-12900

7 месяцев назад

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS3: 4.4
EPSS: Низкий
nvd логотип

CVE-2019-12900

около 6 лет назад

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2019-12900

около 6 лет назад

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bo ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2018-1061

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2018-1061

больше 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2018-1061

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2018-1061

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2018-1060

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2018-1060

больше 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-1060

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2018-1060

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2017-9233

почти 8 лет назад

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2017-9233

около 8 лет назад

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-9674

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

CVSS3: 7.5
1%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-9674

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to caus ...

CVSS3: 7.5
1%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS3: 7.5
0%
Низкий
почти 6 лет назад
redhat логотип
CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS3: 7.5
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

CVSS3: 7.5
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into ...

CVSS3: 7.5
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS3: 9.8
1%
Низкий
около 6 лет назад
redhat логотип
CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS3: 4.4
1%
Низкий
7 месяцев назад
nvd логотип
CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS3: 9.8
1%
Низкий
около 6 лет назад
debian логотип
CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bo ...

CVSS3: 9.8
1%
Низкий
около 6 лет назад
ubuntu логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
1%
Низкий
около 7 лет назад
redhat логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
1%
Низкий
около 7 лет назад
debian логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 6.5
1%
Низкий
около 7 лет назад
ubuntu логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
1%
Низкий
около 7 лет назад
redhat логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 4.3
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
1%
Низкий
около 7 лет назад
debian логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 7.5
1%
Низкий
около 7 лет назад
ubuntu логотип
CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
0%
Низкий
почти 8 лет назад
redhat логотип
CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
0%
Низкий
около 8 лет назад

Уязвимостей на страницу