Skip to contentPython vulnerabilities
Newest
- pediapress mwlibmwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic...CVE-2012-11097.5 High
- python keyring, python keyring lib keyring lib, debian linux +2 moreIncorrect Default Permissions in keyringCVE-2012-5577Fix available7.5 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...CVE-2019-18348Fix available6.1 Medium
- pythonlibrary/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading...CVE-2019-17514Fix available7.5 High
- python pillow, fedoraproject fedora +1 moreDOS attack in Pillow when processing specially crafted image filesCVE-2019-16865Fix available7.5 High
- python, canonical ubuntu linux, debian linux +2 moreThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...CVE-2019-16935Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...CVE-2019-16056Fix available7.5 High
- libexpat project libexpat, python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...CVE-2019-15903Fix available7.5 High
- python novajoin, red hat python-novajoin +1 moreImproper Access Control in novajoinCVE-2019-10138Fix available7.1 High
- pythonhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...CVE-2018-20852Fix available5.3 Medium
- python** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27...CVE-2019-13404Disputed7.8 High
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...CVE-2019-10160Fix available9.8 Critical
- python pyxdgCode Injection in PyXDGCVE-2019-12761Fix available7.5 High
- python urllib3, canonical ubuntu linux +1 moreImproper Certificate Validation in urllib3CVE-2019-11324Fix available7.5 High
- python urllib3Improper Neutralization of CRLF Sequences in urllib3 library for PythonCVE-2019-11236Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...CVE-2019-9947Fix available6.1 Medium
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...CVE-2019-9740Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- python python-gnupg, canonical ubuntu linux, debian linux +2 more +4 moreImproper Input Validation python-gnupgCVE-2019-6690Public exploitFix available7.5 High
- python pypiserverCRLF Injection in pypiserverCVE-2019-6802Fix available6.1 Medium
- python, debian linux, opensuse leap +4 more +6 moreAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...CVE-2019-5010Public exploitFix availableEPSS 20.7%5.9 Medium
- python, debian linux, fedoraproject fedora +2 moreModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...CVE-2018-20406Fix available7.5 High
- python urllib3, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in urllib3CVE-2018-20060Fix available9.8 Critical
- python requests, canonical ubuntu linux, opensuse leap +3 more +5 moreInsufficiently Protected Credentials in RequestsCVE-2018-18074Public exploitFix available7.5 High
- python, canonical ubuntu linux, debian linux +5 more +7 morePython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....CVE-2018-14647Fix availableEPSS 10.9%5.3 Medium
- python, canonical ubuntu linux, debian linux +1 more +3 morePython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...CVE-2018-1000802Public exploitFix availableEPSS 20.1%9.8 Critical
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1061Fix available6.5 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1060Fix available4.3 Medium
- pythonPython Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer...CVE-2018-1000117Public exploit6.7 Medium
- python** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...CVE-2017-18207Fix availableDisputed6.5 Medium
- python, canonical ubuntu linux +1 morePython 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python...CVE-2018-1000030Public exploitFix available3.6 Low
- python** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before...CVE-2017-17522Fix availableDisputed8.8 High
- python, debian linux +1 moreCPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the...CVE-2017-1000158Fix available9.8 Critical
- libexpat project libexpat, debian linux, python +2 moreXML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows...CVE-2017-9233Fix available7.5 High
- kenneth reitz tablibLoaded Databook of Tablib prone to python insertion resulting in command executionCVE-2017-2810Fix available7.5 High
- python openpyxlImproper Restriction of XML External Entity Reference in OpenpyxlCVE-2017-5992Fix available8.2 High
- python urllib3Urllib3 Incorrect Certificate ValidationCVE-2016-9015Fix available3.7 Low
- python hpack, hyper +1 moreHPACK Denial of Service vulnerability (HPACK Bomb)CVE-2016-6581Fix available7.5 High
- python priority librarypriority vulnerable to denial of serviceCVE-2016-6580Fix available7.5 High
- mozilla firefox, debian linux, python +2 moreAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...CVE-2016-9063Fix available9.8 Critical
- python pillow, debian linux +1 moreArbitrary code using "crafted image file" approach affecting PillowCVE-2016-9190Fix available7.8 High
- python pillow, debian linux +1 morePillow Integer overflow in Map.cCVE-2016-9189Fix available5.5 Medium
- python tgcaptcha2TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing...CVE-2016-10000327.5 High
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 moreThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 High
- python, debian linux, fedoraproject fedora +2 moreThe CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable...CVE-2016-1000110Fix available6.1 Medium
- bzip bzip2, python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreUse-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a...CVE-2016-3189Fix availableEPSS 15.7%6.5 Medium
- pythonCRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in...CVE-2016-5699Public exploitFix available6.1 Medium
- pythonInteger overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3...CVE-2016-5636Public exploitFix availableEPSS 25.5%9.8 Critical
- Show moreLoading…