Skip to contentPython vulnerabilities
Newest
- python cpythonIncorrect IPv4 and IPv6 private rangesCVE-2024-4032Fix available7.5 High
- python cpythontempfile.mkdtemp() may be readable and writeable by all users on WindowsCVE-2024-4030Fix available7.1 High
- google protobufUse after free in C++ protobufCVE-2024-2410Fix available7.6 High
- python pillow, debian linux, fedoraproject fedora +2 morePillow buffer overflow vulnerabilityCVE-2024-28219Fix available6.7 Medium
- python cpythonQuoted zip-bomb protection for zipfileCVE-2024-0450Fix available6.2 Medium
- python cpython, python +1 moreGroups not dropped before running subprocess when using empty 'extra_groups' parameterCVE-2023-6507Fix available6.1 Medium
- python pillow, fedoraproject fedora +1 morePillow Denial of Service vulnerabilityCVE-2023-44271Fix available7.5 High
- python urllib3, fedoraproject fedora +1 moreRequest body not stripped after redirect in urllib3CVE-2023-45803Fix available4.2 Medium
- python urllib3Authorization Header forwarded on redirectCVE-2018-25091Fix available6.1 Medium
- python pillow, debian linux +1 moreArbitrary Code Execution in PillowCVE-2023-50447Fix available8.1 High
- python urllib3, debian linux, fedoraproject fedora +2 more`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804Public exploitFix available5.9 Medium
- pythonAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...CVE-2023-40217Fix available5.3 Medium
- python, netapp active iq unified manager +1 moreAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...CVE-2023-41105Fix available7.5 High
- python, debian linux, netapp active iq unified manager +1 more +3 moreAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...CVE-2022-48566Fix available5.9 Medium
- python, debian linux +1 moreAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...CVE-2022-48565Public exploitFix available9.8 Critical
- python, netapp active iq unified manager +1 moreread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...CVE-2022-48564Fix available6.5 Medium
- python, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA use-after-free exists in Python through 3.9 via heappushpop in heapq.CVE-2022-48560Fix available7.5 High
- pythonAn issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the...CVE-2023-38898Disputed5.3 Medium
- pythonThe legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger ...CVE-2023-36632Fix availableDisputed7.5 High
- pythonCPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function...CVE-2023-33595Fix available5.5 Medium
- psf requests, fedoraproject fedora +1 moreUnintended leak of Proxy-Authorization header in requestsCVE-2023-32681Public exploitFix available6.1 Medium
- python, fedoraproject fedora, netapp active iq unified manager +12 more +14 moreThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...CVE-2023-27043Fix available5.3 Medium
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- python setuptoolspypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2022-40897Fix available5.9 Medium
- python pillowPillow subject to DoS via SAMPLESPERPIXEL tagCVE-2022-45199Fix available7.5 High
- python pillowPillow vulnerable to Data Amplification attack.CVE-2022-45198Fix available7.5 High
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- python, fedoraproject fedora +1 morePython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...CVE-2022-42919Fix available7.8 High
- debian linux, extended keccak code package project keccak code package, fedoraproject fedora +9 more +11 moreBuffer overflow in sponge queue functionsCVE-2022-37454Fix available9.8 Critical
- python, fedoraproject fedora, redhat enterprise linux +5 more +7 moreA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...CVE-2020-10735Fix available7.5 High
- python, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...CVE-2021-28861Fix availableDisputed7.4 High
- pythonPython pgAdmin4 uncontrolled search pathCVE-2017-200525.0 Medium
- python pillowBuffer over-flow in PillowCVE-2022-30595Fix available9.8 Critical
- python pypiCode-execution backdoor in marcadorCVE-2022-28470Fix available9.8 Critical
- paulledemon tkvideoplayerMemory issue in playing videosCVE-2022-24902Fix available2.9 Low
- python, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...CVE-2015-20107Public exploitFix available7.6 High
- nokogiri, zlib, apple mac os x +28 more +30 moreNokogiri affected by zlib's Out-of-bounds Write vulnerabilityCVE-2018-25032Public exploitFix availableEPSS 51.7%7.5 High
- python, netapp active iq unified manager, ontap select deploy administration utility +3 more +5 moreIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...CVE-2022-26488Public exploitFix available7.0 High
- python pillow, fedoraproject fedora +1 morePath traversal in PillowCVE-2022-24303Fix available9.1 Critical
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 High
- google protobuf, debian linux, fedoraproject fedora +5 more +7 moreNullptr Dereference in ProtobufCVE-2021-22570Fix available6.5 Medium
- python pillow, debian linux +1 moreArbitrary expression injection in PillowCVE-2022-22817Fix available9.8 Critical
- python pillow, debian linux +1 moreOut-of-bounds Read in PillowCVE-2022-22816Fix available6.5 Medium
- python pillow, debian linux +1 moreImproper Initialization in PillowCVE-2022-22815Fix available6.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- microco bluemonday, python pybluemonday +1 morePolicies not properly enforced in bluemondayCVE-2021-42576Fix available9.8 Critical
- python pillow, fedoraproject fedora +1 moreRegular Expression Denial of Service (ReDoS)CVE-2021-23437Fix available7.5 High
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- python pillow, debian linux, fedoraproject fedora +2 moreBuffer Overflow in PillowCVE-2021-34552Fix available9.8 Critical
- Show moreLoading…