Количество 14
Количество 14
CVE-2014-4650
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
CVE-2014-4650
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
CVE-2014-4650
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
CVE-2014-4650
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly h ...
GHSA-33c8-ggqv-8g5p
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
BDU:2015-00666
Уязвимость программного обеспечения Python, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
SUSE-SU-2015:1344-1
Security update for python
ELSA-2015-1330
ELSA-2015-1330: python security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2016:2120-1
Security update for python3
ELSA-2015-2101
ELSA-2015-2101: python security, bug fix, and enhancement update (MODERATE)
ELSA-2015-1064
ELSA-2015-1064: python27 security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2020:0086-1
Security update for python3
SUSE-SU-2020:0114-1
Security update for python3
SUSE-SU-2020:0234-1
Security update for python
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-4650 The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator. | CVSS3: 9.8 | 10% Средний | больше 5 лет назад |
 | CVE-2014-4650 The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator. | CVSS2: 5 | 10% Средний | почти 11 лет назад |
 | CVE-2014-4650 The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator. | CVSS3: 9.8 | 10% Средний | больше 5 лет назад |
| CVE-2014-4650 The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly h ... | CVSS3: 9.8 | 10% Средний | больше 5 лет назад |
| GHSA-33c8-ggqv-8g5p The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator. | CVSS3: 9.8 | 10% Средний | около 3 лет назад |
 | BDU:2015-00666 Уязвимость программного обеспечения Python, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации | CVSS2: 9.3 | 10% Средний | почти 11 лет назад |
 | SUSE-SU-2015:1344-1 Security update for python | почти 10 лет назад | ||
| ELSA-2015-1330 ELSA-2015-1330: python security, bug fix, and enhancement update (MODERATE) | почти 10 лет назад | ||
| openSUSE-SU-2016:2120-1 Security update for python3 | почти 9 лет назад | ||
| ELSA-2015-2101 ELSA-2015-2101: python security, bug fix, and enhancement update (MODERATE) | больше 9 лет назад | ||
| ELSA-2015-1064 ELSA-2015-1064: python27 security, bug fix, and enhancement update (MODERATE) | больше 9 лет назад | ||
| openSUSE-SU-2020:0086-1 Security update for python3 | больше 5 лет назад | ||
| SUSE-SU-2020:0114-1 Security update for python3 | больше 5 лет назад | ||
| SUSE-SU-2020:0234-1 Security update for python | больше 5 лет назад |
Уязвимостей на страницу