Filter
AND
-Infinity
0
Trending
Python JSON LoggerPython JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency
8.8
EPSS
0.61%
First published (updated )
Python 2.7Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "paus…
7
First published (updated )
debian/python3.11Unbounded memory buffering in SelectorSocketTransport.writelines()
8.7
First published (updated )
Python 2.7Virtual environment (venv) activation scripts don't quote paths
7.8
EPSS
0.04%
First published (updated )
Python 2.7Regular-expression DoS when parsing TarFile headers
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python 2.7Quadratic complexity parsing cookies with backslashes
7.5
EPSS
0.11%
First published (updated )
NASA AIT-CoreAn issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary co…
7.5
First published (updated )
Python 2.7tempfile.mkdtemp() may be readable and writeable by all users on Windows
7.1
EPSS
0.04%
First published (updated )
PythonAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.1…
7
First published (updated )
Python Imaging Library (Pillow)Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment paramet…
7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/pillowPillow 10.2.0 released, fixes CVE-2023-50447
8.1
First published (updated )
ubuntu/pillowAn issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably alloc…
7.5
First published (updated )
Red Hat Fedora`Cookie` HTTP header isn't stripped on cross-origin redirects
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python 2.7Python is vulnerable to a denial of service, caused by a RecursionError in email.utils.parseaddr #10…
7.5
First published (updated )
F5 BIG-IP and BIG-IQ Centralized ManagementInput Validation
7.5
First published (updated )
pip/pillowPillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/pillowPillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Python 2.7In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inade…
7
First published (updated )
Red Hat FedoraRegular Expression Denial of Service (ReDoS)
7.5
First published (updated )
Oracle Instantis EnterpriseTrackurllib3 is vulnerable to a denial of service, caused by a regular expression denial of service (ReDo…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.