python Vulnerability Advisory Catalog

Total 245 security vulnerabilities recorded for python software and firmware.

← Back to All Vendors
CVE-2011-4617 UNKNOWN
Component: virtualenv

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/....

📅 2011-12-31
CVSS 1.2 Dossier →
CVE-2011-1521 UNKNOWN
Component: python

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which ...

📅 2011-05-24
CVSS 6.4 Dossier →
CVE-2011-1015 UNKNOWN
Component: python

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via a...

📅 2011-05-09
CVSS 5.0 Dossier →
CVE-2010-3493 UNKNOWN
Component: python

Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (d...

📅 2010-10-19
CVSS 4.3 Dossier →
CVE-2010-3492 UNKNOWN
Component: python

The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentat...

📅 2010-10-19
CVSS 5.0 Dossier →
CVE-2010-2089 UNKNOWN
Component: python

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-depend...

📅 2010-05-27
CVSS 5.0 Dossier →
CVE-2010-1634 UNKNOWN
Component: python

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of ...

📅 2010-05-27
CVSS 5.0 Dossier →
CVE-2010-1450 UNKNOWN
Component: python

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file...

📅 2010-05-27
CVSS 7.5 Dossier →
CVE-2010-1449 UNKNOWN
Component: python

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that tri...

📅 2010-05-27
CVSS 7.5 Dossier →
CVE-2009-4134 UNKNOWN
Component: python

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value i...

📅 2010-05-27
CVSS 5.0 Dossier →
CVE-2008-5983 UNKNOWN
Component: python

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string...

📅 2009-01-28
CVSS 6.9 Dossier →
CVE-2008-5031 UNKNOWN
Component: python

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer val...

📅 2008-11-10
CVSS 10.0 Dossier →
CVE-2008-4864 UNKNOWN
Component: python

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Pyth...

📅 2008-11-01
CVSS 7.5 Dossier →
CVE-2008-3144 UNKNOWN
Component: python

Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to caus...

📅 2008-08-01
CVSS 5.0 Dossier →
CVE-2008-3143 UNKNOWN
Component: python

Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include...

📅 2008-08-01
CVSS 7.5 Dossier →
CVE-2008-3142 UNKNOWN
Component: python

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or hav...

📅 2008-08-01
CVSS 7.5 Dossier →
CVE-2008-2316 UNKNOWN
Component: python

Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic d...

📅 2008-08-01
CVSS 7.5 Dossier →
CVE-2008-2315 UNKNOWN
Component: python

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stri...

📅 2008-08-01
CVSS 7.5 Dossier →
CVE-2008-1679 UNKNOWN
Component: python

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly exe...

📅 2008-04-22
CVSS 6.8 Dossier →
CVE-2008-1887 UNKNOWN
Component: python

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be prov...

📅 2008-04-18
CVSS 9.3 Dossier →
CVE-2008-1721 UNKNOWN
Component: python

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative sig...

📅 2008-04-10
CVSS 7.5 Dossier →
CVE-2007-4965 UNKNOWN
Component: python

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (applicati...

📅 2007-09-18
CVSS 5.8 Dossier →
CVE-2007-4559 CRITICAL
Component: python

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attacker...

📅 2007-08-28
CVSS 9.8 Dossier →
CVE-2007-2052 UNKNOWN
Component: python

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the...

📅 2007-04-16
CVSS 5.0 Dossier →
Page 10 of 11 (245 Total Records)