| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15523 | 6.9 | In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use a | 2022-07-05 18:54:00 | 2020-07-04 23:15:00 |
| CVE-2008-4864 | 7.5 | Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, | 2022-07-05 18:48:00 | 2008-11-01 00:00:00 |
| CVE-2008-1721 | 7.5 | Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow. | 2022-07-05 18:43:00 | 2008-04-10 19:05:00 |
| CVE-2015-0235 | 10.0 | Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 fu | 2022-07-05 18:42:00 | 2015-01-28 19:59:00 |
| CVE-2008-3142 | 7.5 | Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicod | 2022-07-05 18:41:00 | 2008-08-01 14:41:00 |
| CVE-2022-30118 | 4.3 | Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 an | 2022-07-05 18:39:00 | 2022-06-24 15:15:00 |
| CVE-2022-30117 | 6.4 | Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure | 2022-07-05 18:05:00 | 2022-06-24 15:15:00 |
| CVE-2022-2120 | 7.5 | OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution. | 2022-07-05 17:26:00 | 2022-06-24 15:15:00 |
| CVE-2022-2119 | 7.5 | OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution. | 2022-07-05 17:24:00 | 2022-06-24 15:15:00 |
| CVE-2022-2103 | 6.4 | An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories. | 2022-07-05 17:05:00 | 2022-06-24 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: