Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
python python vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2013-7338
Python prior to 3.3.4 RC1 allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, o...
Python Python 3.3.0
Python Python 3.3.1
Python Python 3.3.2
Python Python 3.3.3
Apple Mac Os X
7.8
CVSSv3
CVE-2020-15523
In Python 3.6 up to and including 3.6.10, 3.7 up to and including 3.7.8, 3.8 up to and including 3.8.4rc1, and 3.9 up to and including 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because pyth...
Python Python 3.9.0
Python Python
Python Python 3.8.4
Netapp Snapcenter -
NA
CVE-2011-4617
virtualenv.py in virtualenv prior to 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
Python Virtualenv 1.4.7
Python Virtualenv 1.4.6
Python Virtualenv 1.3.4
Python Virtualenv 1.3.3
Python Virtualenv 1.3.2
Python Virtualenv 0.9.2
Python Virtualenv 0.9.1
Python Virtualenv 1.4.3
Python Virtualenv 1.4.2
Python Virtualenv 1.2
Python Virtualenv 1.1.1
Python Virtualenv 0.8.3
Python Virtualenv 0.8.2
Python Virtualenv 1.4.5
Python Virtualenv 1.4.4
Python Virtualenv 1.3.1
Python Virtualenv 1.3
Python Virtualenv 0.9
Python Virtualenv 0.8.4
Python Virtualenv
Python Virtualenv 1.4.8
Python Virtualenv 1.4.1
NA
CVE-2005-0089
The SimpleXMLRPCServer library module in Python 2.2, 2.3 prior to 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote malicious users to read or modify globals of the associated module,...
Python Python 2.4.0
Python Python
6.7
CVSSv3
CVE-2018-1000117
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python ...
Python Python 3.7.0
Python Python
1 Github repository
5.5
CVSSv3
CVE-2016-3076
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 up to and including 3.1.1 allows remote malicious users to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
Python Pillow 2.9.0
Python Pillow 2.5.1
Python Pillow 2.5.2
Python Pillow 3.0.0
Python Pillow 2.5.3
Python Pillow 2.6.2
Python Pillow 2.6.0
Python Pillow 2.5.0
Python Pillow 2.7.0
Python Pillow 3.1.0
Python Pillow 2.6.1
Python Pillow 2.8.2
Python Pillow 2.8.1
Python Pillow 2.8.0
2 Github repositories
NA
CVE-2013-1633
easy_install in setuptools prior to 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle malicious users to execute arbitrary code via a crafted response to the default use of the pr...
Python Setuptools 0.6.44
Python Setuptools 0.6.46
Python Setuptools 0.6.48
Python Setuptools
Python Setuptools 0.6.43
Python Setuptools 0.6.40
Python Setuptools 0.6.49
Python Setuptools 0.6.47
Python Setuptools 0.6.45
Python Setuptools 0.6.41
Python Setuptools 0.6.42
NA
CVE-2010-3493
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote malicious users to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpe...
Python Python 3.1
Python Python 3.2
4.9
CVSSv3
CVE-2023-6507
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not c...
Python Python 3.12.0
Python Python 3.13.0
NA
CVE-2007-2052
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent malicious users to read portions of memory via unknown manipulations that trigge...
Python Python 2.4.0
Python Python 2.5.0
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228
CVE-2024-20361
log injection
bypass
CVE-2024-4985
CVE-2024-35223
CVE-2024-29849
CVE-2024-31893
IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »