python2-tkinter vulnerabilities (Red Hat)

43 vulnerabilities.

• python2-tkinter Red Hat Jinja vulnerable to Cross-Site Scripting (XSS) CVE-2024-22195 Fix available 5.4 MediumJanuary 11, 2024
• python2-tkinter Red Hat `Cookie` HTTP header isn't stripped on cross-origin redirects CVE-2023-43804 Public exploitFix available 5.9 MediumOctober 2, 2023
• python2-tkinter Red Hat An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... CVE-2023-40217 Fix available 5.3 MediumAugust 24, 2023
• python2-tkinter Red Hat An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no... CVE-2022-48565 Public exploitFix available 9.8 CriticalAugust 22, 2023
• python2-tkinter Red Hat A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2022-48560 Fix available 7.5 HighAugust 22, 2023
• python2-tkinter Red Hat Unintended leak of Proxy-Authorization header in requests CVE-2023-32681 Public exploitFix available 6.1 MediumMay 22, 2023
• python2-tkinter Red Hat An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• python2-tkinter Red Hat pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2022-40897 Fix available 5.9 MediumDecember 22, 2022
• python2-tkinter Red Hat An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• python2-tkinter Red Hat In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into... CVE-2015-20107 Public exploitFix available 7.6 HighApril 13, 2022
• python2-tkinter Red Hat A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• python2-tkinter Red Hat A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in... CVE-2021-4189 Fix available 5.3 MediumDecember 31, 2021
• python2-tkinter Red Hat HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• python2-tkinter Red Hat Directory Traversal in Babel CVE-2021-42771 Fix available 7.8 HighOctober 20, 2021
• python2-tkinter Red Hat There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... CVE-2021-3733 Fix available 6.5 MediumSeptember 2, 2021
• python2-tkinter Red Hat A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... CVE-2021-3737 Fix available EPSS 13.2% 7.5 HighAugust 31, 2021
• python2-tkinter Red Hat Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk... CVE-2021-20095 Fix availableRejected 7.8 HighApril 29, 2021
• python2-tkinter Red Hat lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• python2-tkinter Red Hat Pygments vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-27291 Fix available 7.5 HighMarch 17, 2021
• python2-tkinter Red Hat Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• python2-tkinter Red Hat Web Cache Poisoning CVE-2021-23336 Fix available EPSS 40.7% 5.9 MediumFebruary 15, 2021
• python2-tkinter Red Hat Regular Expression Denial of Service (ReDoS) CVE-2020-28493 Fix available 5.3 MediumFebruary 1, 2021
• python2-tkinter Red Hat Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may... CVE-2021-3177 Fix available EPSS 24.0% 9.8 CriticalJanuary 19, 2021
• python2-tkinter Red Hat lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• python2-tkinter Red Hat In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on... CVE-2020-27619 Fix available 9.8 CriticalOctober 22, 2020
• python2-tkinter Red Hat CRLF injection in urllib3 CVE-2020-26137 Fix available 6.5 MediumSeptember 29, 2020
• python2-tkinter Red Hat http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x... CVE-2020-26116 Fix available 7.2 HighSeptember 27, 2020
• python2-tkinter Red Hat Path Traversal in pip CVE-2019-20916 Fix available 7.5 HighSeptember 4, 2020
• python2-tkinter Red Hat In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to... CVE-2019-20907 Fix available 7.5 HighJuly 13, 2020
• python2-tkinter Red Hat The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3... CVE-2019-16935 Fix available 6.1 MediumSeptember 28, 2019
• python2-tkinter Red Hat An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7... CVE-2019-16056 Fix available 7.5 HighSeptember 6, 2019
• python2-tkinter Red Hat http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3... CVE-2018-20852 Fix available 5.3 MediumJuly 13, 2019
• python2-tkinter Red Hat Improper Certificate Validation in urllib3 CVE-2019-11324 Fix available 7.5 HighApril 18, 2019
• python2-tkinter Red Hat Improper Neutralization of CRLF Sequences in urllib3 library for Python CVE-2019-11236 Fix available 6.1 MediumApril 15, 2019
• python2-tkinter Red Hat urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for... CVE-2019-9948 Fix available EPSS 11.8% 9.1 CriticalMarch 23, 2019
• python2-tkinter Red Hat An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... CVE-2019-9947 Fix available 6.1 MediumMarch 23, 2019
• python2-tkinter Red Hat An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... CVE-2019-9740 Fix available 6.1 MediumMarch 12, 2019
• python2-tkinter Red Hat Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode... CVE-2019-9636 Fix available 9.8 CriticalMarch 8, 2019
• python2-tkinter Red Hat SQLAlchemy vulnerable to SQL Injection via order_by parameter CVE-2019-7164 Fix available 9.8 CriticalFebruary 20, 2019
• python2-tkinter Red Hat SQLAlchemy is vulnerable to SQL Injection via group_by parameter CVE-2019-7548 Fix available 7.8 HighFebruary 6, 2019
• python2-tkinter Red Hat Numpy Deserialization of Untrusted Data CVE-2019-6446 Public exploitFix availableDisputed EPSS 27.3% 9.8 CriticalJanuary 16, 2019
• python2-tkinter Red Hat Exposure of Sensitive Information to an Unauthorized Actor in urllib3 CVE-2018-20060 Fix available 9.8 CriticalDecember 11, 2018
• python2-tkinter Red Hat Insufficiently Protected Credentials in Requests CVE-2018-18074 Public exploitFix available 7.5 HighOctober 9, 2018