Skip to contentPython vulnerabilities
Newest
- pythonThe smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5...CVE-2016-0772Public exploitFix availableEPSS 15.4%6.5 Medium
- canonical ubuntu linux, libexpat project libexpat, mcafee policy auditor +1 more +3 moreThe overflow protection in Expat is removed by compilers with certain optimization settings,...CVE-2016-4472Fix availableEPSS 11.9%8.1 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- python pillowPillow Buffer overflow in Jpeg2KEncode.cCVE-2016-3076Fix available5.5 Medium
- python pillowPillow Integer overflow in ImagingResampleHorizontalCVE-2016-4009Fix available9.8 Critical
- python pillow, python imaging project imaging, debian linux +2 morePillow buffer overflow in ImagingPcdDecodeCVE-2016-2533Fix available6.5 Medium
- python pillow, debian linux +1 morePillow Buffer overflow in ImagingFliDecodeCVE-2016-0775Fix available6.5 Medium
- python pillow, debian linux +1 morePillow Buffer overflow in ImagingLibTiffDecodeCVE-2016-0740Fix available6.5 Medium
- python rsa, fedoraproject fedora, opensuse leap +1 more +3 morePython RSA allows attackers to spoof signaturesCVE-2016-1494Public exploitFix available5.3 Medium
- pythonUntrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local...CVE-2015-56527.2 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- pythonThe ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...CVE-2013-7440Fix available5.9 Medium
- python pillow, opensuse +1 morePillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePluginCVE-2014-3598Fix available5.0 Medium
- python requests, canonical ubuntu linux, mageia project mageia +2 morePython Requests Session FixationCVE-2015-2296Fix available6.8 Medium
- python pillow, fedoraproject fedora, opensuse +1 more +3 morePillow denial of service via PNG bombCVE-2014-9601Fix available5.0 Medium
- python, apple mac os x +1 moreThe HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in...CVE-2014-9365Fix available5.8 Medium
- python, apple mac os x +1 moreInteger overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...CVE-2014-7185Fix available6.4 Medium
- python requests, opensuse +1 moreExposure of Sensitive Information to an Unauthorized Actor in RequestsCVE-2014-1830Fix available5.0 Medium
- python requests, canonical ubuntu linux, debian linux +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in RequestsCVE-2014-1829Fix available5.0 Medium
- python pillow, debian python-imaging, opensuse +2 morePillow denial of service via Crafted Block SizeCVE-2014-3589Fix available5.0 Medium
- python, simplejson project simplejson, opensuse +2 moresimplejson before 2.6.1 vulnerable to array index errorCVE-2014-4616Fix available5.9 Medium
- python, redhat enterprise linux, software collections +2 moreThe CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL...CVE-2014-4650Public exploitFix availableEPSS 23.9%9.8 Critical
- python, apple mac os x +1 morePython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which...CVE-2013-70404.3 Medium
- pythonRace condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when...CVE-2014-2667Fix available3.3 Low
- python pillow, pythonware python imaging library +1 morePillow command injectionCVE-2014-3007Fix availableEPSS 10.4%10.0 High
- python pillow, pythonware python imaging library +1 morePillow Temporary file name leakageCVE-2014-1933Fix available2.1 Low
- python pillow, pythonware python imaging library +1 morePIL and Pillow Vulnerable to Symlink Attack on TmpfilesCVE-2014-1932Fix available4.4 Medium
- python, apple mac os x +1 morePython before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and...CVE-2013-7338Fix available7.1 High
- pythonThe gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote...CVE-2013-1753Fix available7.5 High
- python, apple mac os x +1 moreBuffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5...CVE-2014-1912Public exploitFix availableEPSS 27.2%7.5 High
- python pyxdgpyxdg Arbitrary File Overwrite via Race ConditionCVE-2014-1624Fix available3.3 Low
- python rplyRPLY Predictable Tmpfile Names Allows Cache SpoofingCVE-2014-1604Fix available2.1 Low
- apple ipados, iphone os, macos +7 more +9 moreexpat 2.1.0 and earlier does not properly handle entities expansion unless an application...CVE-2013-0340Fix availableEPSS 19.4%6.8 Medium
- python, canonical ubuntu linux, opensuse +2 moreThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...CVE-2013-4238Fix available4.3 Medium
- python setuptoolsSetuptools vulnerable to Man-in-the-middle attacksCVE-2013-1633Fix available6.8 Medium
- python, canonical ubuntu linux +1 moreAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...CVE-2013-2099Fix available4.3 Medium
- python keyringPython Keyring does not securely initialize encryption cipherCVE-2012-4571Fix available2.1 Low
- pythonPython before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash...CVE-2012-1150Fix available5.0 Medium
- pythonSimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...CVE-2012-0845Fix available5.0 Medium
- python beakerBeaker Sensitive Information Disclosure vulnerabilityCVE-2012-3458Fix available4.3 Medium
- openssl, fedoraproject fedora, filezilla-project filezilla server +13 more +15 moreOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 High
- pythonPython 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...CVE-2011-4944Fix available1.9 Low
- python, canonical ubuntu linux, debian linux +2 moreThe utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after...CVE-2012-21356.4 Medium
- canonical ubuntu linux, debian linux, libexpat project libexpat +8 more +10 moreThe XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...CVE-2012-0876Fix available4.3 Medium
- pythonThe list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5...CVE-2011-4940Fix available2.6 Low
- python virtualenvVirtualenv Allows Symlink Attack on /tmp/CVE-2011-4617Fix available1.2 Low
- pythonThe urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location...CVE-2011-1521Fix available6.4 Medium
- pythonThe is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0...CVE-2011-10155.0 Medium
- pythonMultiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha...CVE-2010-34934.3 Medium
- pythonThe asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the...CVE-2010-3492Fix available5.0 Medium
- Show moreLoading…