Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"

Количество 879

Количество 879

redhat логотип

CVE-2018-1061

больше 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2018-1061

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2018-1061

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2018-1060

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2018-1060

больше 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-1060

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2018-1060

около 7 лет назад

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2017-9233

около 8 лет назад

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2017-9233

около 8 лет назад

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2017-9233

около 8 лет назад

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2017-9233

около 8 лет назад

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2016-9063

около 7 лет назад

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2016-9063

больше 8 лет назад

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2016-9063

около 7 лет назад

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2016-9063

около 7 лет назад

An integer overflow during the parsing of XML using the Expat library. ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2016-3189

около 9 лет назад

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CVSS3: 6.5
EPSS: Средний
redhat логотип

CVE-2016-3189

около 9 лет назад

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CVSS2: 4.3
EPSS: Средний
nvd логотип

CVE-2016-3189

около 9 лет назад

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CVSS3: 6.5
EPSS: Средний
debian логотип

CVE-2016-3189

около 9 лет назад

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows rem ...

CVSS3: 6.5
EPSS: Средний
ubuntu логотип

CVE-2014-4650

больше 5 лет назад

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.

CVSS3: 9.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVSS3: 6.5
1%
Низкий
около 7 лет назад
debian логотип
CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 6.5
1%
Низкий
около 7 лет назад
ubuntu логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
1%
Низкий
около 7 лет назад
redhat логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 4.3
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVSS3: 7.5
1%
Низкий
около 7 лет назад
debian логотип
CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...

CVSS3: 7.5
1%
Низкий
около 7 лет назад
ubuntu логотип
CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
0%
Низкий
около 8 лет назад
redhat логотип
CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
0%
Низкий
около 8 лет назад
nvd логотип
CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

CVSS3: 7.5
0%
Низкий
около 8 лет назад
debian логотип
CVE-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat ...

CVSS3: 7.5
0%
Низкий
около 8 лет назад
ubuntu логотип
CVE-2016-9063

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

CVSS3: 9.8
1%
Низкий
около 7 лет назад
redhat логотип
CVE-2016-9063

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

CVSS3: 9.8
1%
Низкий
больше 8 лет назад
nvd логотип
CVE-2016-9063

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

CVSS3: 9.8
1%
Низкий
около 7 лет назад
debian логотип
CVE-2016-9063

An integer overflow during the parsing of XML using the Expat library. ...

CVSS3: 9.8
1%
Низкий
около 7 лет назад
ubuntu логотип
CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CVSS3: 6.5
14%
Средний
около 9 лет назад
redhat логотип
CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CVSS2: 4.3
14%
Средний
около 9 лет назад
nvd логотип
CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CVSS3: 6.5
14%
Средний
около 9 лет назад
debian логотип
CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows rem ...

CVSS3: 6.5
14%
Средний
около 9 лет назад
ubuntu логотип
CVE-2014-4650

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.

CVSS3: 9.8
14%
Средний
больше 5 лет назад

Уязвимостей на страницу