python vulnerabilities (Red Hat)
65 vulnerabilities.
-
pythonRed Hat Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() 7.0 High -
pythonRed Hat webbrowser.open() allows leading dashes in URLs 7.0 High -
pythonRed Hat POP3 command injection in user-controlled commands 5.9 Medium -
pythonRed Hat IMAP command injection in user-controlled commands 5.9 Medium -
pythonRed Hat Quadratic complexity in node ID cache clearing 6.3 Medium -
pythonRed Hat An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... 5.3 Medium -
pythonRed Hat An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... 7.5 High -
pythonRed Hat Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may... 9.8 Critical -
pythonRed Hat CRLF injection in urllib3 6.5 Medium -
pythonRed Hat http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x... 7.2 High -
pythonRed Hat In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to... 7.5 High -
pythonRed Hat The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3... 6.1 Medium -
pythonRed Hat An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7... 7.5 High -
pythonRed Hat http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3... 5.3 Medium -
pythonRed Hat A security regression of CVE-2019-9636 was discovered in python since commit... 9.8 Critical -
pythonRed Hat urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for... 9.1 Critical -
pythonRed Hat An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... 6.1 Medium -
pythonRed Hat An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... 6.1 Medium -
pythonRed Hat Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode... 9.8 Critical -
pythonRed Hat An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python... 5.9 Medium -
pythonRed Hat Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.... 5.3 Medium -
pythonRed Hat python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic... 6.5 Medium -
pythonRed Hat python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic... 4.3 Medium -
pythonRed Hat The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
pythonRed Hat The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable... 6.1 Medium -
pythonRed Hat CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in... 6.1 Medium -
pythonRed Hat Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3... 9.8 Critical -
pythonRed Hat The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5... 6.5 Medium -
pythonRed Hat The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in... 5.8 Medium -
pythonRed Hat Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to... 6.4 Medium -
pythonRed Hat simplejson before 2.6.1 vulnerable to array index error 5.9 Medium -
pythonRed Hat The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL... 9.8 Critical -
pythonRed Hat The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote... 7.5 High -
pythonRed Hat Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5... 7.5 High -
pythonRed Hat Updated python & python3 packages fix multiple vulnerabilities No score -
pythonRed Hat The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly... 4.3 Medium -
pythonRed Hat Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash... 5.0 Medium -
pythonRed Hat SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x... 5.0 Medium -
pythonRed Hat Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them... 1.9 Low -
pythonRed Hat The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5... 2.6 Low -
pythonRed Hat The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location... 6.4 Medium -
pythonRed Hat The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0... 5.0 Medium -
pythonRed Hat Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha... 4.3 Medium -
pythonRed Hat The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments... 5.0 Medium -
pythonRed Hat Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2... 5.0 Medium -
pythonRed Hat Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote... 7.5 High -
pythonRed Hat Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to... 7.5 High -
pythonRed Hat Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of... 5.0 Medium -
pythonRed Hat The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,... 5.0 Medium -
pythonRed Hat Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier,... 6.9 Medium - Show olderLoading…