Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2018-1654
ALT-PU-2018-1654: package `python3` update to version 3.6.4-alt1
CVE-2017-17522
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting
CVE-2017-17522
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting
CVE-2017-17522
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting
CVE-2017-17522
CVE-2017-17522
Lib/webbrowser.py in Python through 3.6.3 does not validate strings be ...
CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow ...
GHSA-3qjm-23v2-9v26
** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting.
BDU:2023-01646
Уязвимость компонента Lib/webbrowser.py интерпретатора языка программирования Python, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
SUSE-SU-2018:0768-1
Security update for python
GHSA-r68f-4xcm-3xr6
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
BDU:2019-00438
Уязвимость функции PyString_DecodeEscape интерпретатора языка программирования Python (CPython), позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2018:1415-1
Security update for python
SUSE-SU-2018:1372-1
Security update for python
SUSE-SU-2020:0497-1
Security update for python3
ALT-PU-2018-2782
ALT-PU-2018-2782: package `python` update to version 2.7.15-alt1
SUSE-SU-2020:0234-1
Security update for python
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-1654 ALT-PU-2018-1654: package `python3` update to version 3.6.4-alt1 | CVSS3: 9.8 | больше 8 лет назад | |
 | CVE-2017-17522 Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting | CVSS3: 8.8 | 4% Низкий | почти 9 лет назад |
 | CVE-2017-17522 Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting | CVSS3: 5.3 | 4% Низкий | почти 9 лет назад |
 | CVE-2017-17522 Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting | CVSS3: 8.8 | 4% Низкий | почти 9 лет назад |
 | CVSS3: 8.8 | 4% Низкий | около 2 лет назад | |
| CVE-2017-17522 Lib/webbrowser.py in Python through 3.6.3 does not validate strings be ... | CVSS3: 8.8 | 4% Низкий | почти 9 лет назад |
| CVE-2017-1000158 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution) | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
| CVE-2017-1000158 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution) | CVSS3: 8.1 | 8% Низкий | больше 9 лет назад |
| CVE-2017-1000158 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution) | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
| CVE-2017-1000158 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow ... | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
| GHSA-3qjm-23v2-9v26 ** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting. | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
 | BDU:2023-01646 Уязвимость компонента Lib/webbrowser.py интерпретатора языка программирования Python, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.5 | 4% Низкий | почти 9 лет назад |
 | SUSE-SU-2018:0768-1 Security update for python | 8% Низкий | больше 8 лет назад | |
| GHSA-r68f-4xcm-3xr6 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution) | CVSS3: 9.8 | 8% Низкий | больше 4 лет назад |
| BDU:2019-00438 Уязвимость функции PyString_DecodeEscape интерпретатора языка программирования Python (CPython), позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
| openSUSE-SU-2018:1415-1 Security update for python | больше 8 лет назад | ||
| SUSE-SU-2018:1372-1 Security update for python | больше 8 лет назад | ||
| SUSE-SU-2020:0497-1 Security update for python3 | больше 6 лет назад | ||
| ALT-PU-2018-2782 ALT-PU-2018-2782: package `python` update to version 2.7.15-alt1 | CVSS3: 9.8 | почти 8 лет назад | |
| SUSE-SU-2020:0234-1 Security update for python | почти 7 лет назад |
Уязвимостей на страницу