Filtered by vendor Python
Subscribe
Total
225 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2013-1895 | 2 Fedoraproject, Python | 2 Fedora, Py-bcrypt | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten. | |||||
CVE-2013-1753 | 1 Python | 1 Python | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. | |||||
CVE-2012-5578 | 1 Python | 1 Keyring | 2024-11-21 | 2.1 LOW | 6.2 MEDIUM |
Python keyring has insecure permissions on new databases allowing world-readable files to be created | |||||
CVE-2012-5577 | 2 Debian, Python | 2 Debian Linux, Keyring | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
Python keyring lib before 0.10 created keyring files with world-readable permissions. | |||||
CVE-2012-0877 | 2 Python, Redhat | 3 Pyxml, Enterprise Linux, Enterprise Virtualization Hypervisor | 2024-11-21 | 7.8 HIGH | 7.5 HIGH |
PyXML: Hash table collisions CPU usage Denial of Service |