python python 3.7.0 vulnerabilities and exploits

(subscribe to this query)

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python ...

Python Python 3.7.0 Python Python

1 Github repository

library/glob.html in the Python 2 and 3 documentation prior to 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irreproducible cancer-research results. NOTE: the effects of this documentation cross application domains, and thus it is li...

Python Python 3.8.0 Python Python 3.6.0 Python Python 3.7.0

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's inte...

Python Python Python Python 3.7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Fedoraproject Fedora 30 Opensuse Leap 15.1 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0

The package python/cpython from 0 and prior to 3.6.13, from 3.7.0 and prior to 3.7.10, from 3.8.0 and prior to 3.8.8, from 3.9.0 and prior to 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaki...

Python Python Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Snapcenter -Netapp Ontap Select Deploy Administration Utility -Netapp Inventory Collect Tool -Djangoproject Django Oracle Zfs Storage Appliance 8.8 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Pricing Design Center 12.0.0.3.0

Unspecified vulnerability in Eric Integrated Development Environment (eric3) prior to 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."

Eric Integrated Development Environment Eric Integrated Development Environment 3.6.0 Eric Integrated Development Environment Eric Integrated Development Environment 3.6.1 Eric Integrated Development Environment Eric Integrated Development Environment 3.6.2 Eric Integrated Development Environment Eric Integrated Development Environment 3.7.0 Eric Integrated Development Environment Eric Integrated Development Environment 3.5.0 Eric Integrated Development Environment Eric Integrated Development Environment 3.4.2 Eric Integrated Development Environment Eric Integrated Development Environment 3.5.1 Eric Integrated Development Environment Eric Integrated Development Environment 3.7.1

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 up to and including 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the C...

Pypdf Project Pypdf

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook