Known vulnerabilities in Python - page 4

Vendor: Python.org
Software: Python
Software CPE: cpe:2.3:a:python_org:python:*:*:*:*:*:*:*:*
Total vulnerabilities: 117
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Python Python is affected by 117 known vulnerabilities: 14 high, 80 medium, 23 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110154 - Integer overflow
CVE-2010-1449
CWE-190 Medium
No
No
2.5 _ 13.02.2023 SB2020021838
#VU110151 - Out-of-bounds write
CVE-2010-2089
CWE-787 Medium
Available
No
2.7 rc2 16.08.2022 SB2022081667
SB2010060402
#VU110156 - Untrusted Search Path
CVE-2008-5983
CWE-426 Low
No
No
- 05.07.2022 SB2022070550
SB2010060402
#VU110158 - Integer overflow
CVE-2008-4864
CWE-190 Medium
Available
No
- 05.07.2022 SB2022070551
#VU110166 - Incorrect Conversion between Numeric Types
CVE-2008-1721
CWE-681 Medium
Available
No
- 05.07.2022 SB2022070553
SB2008070105
#VU110161 - Buffer overflow
CVE-2008-3142
CWE-120 Medium
No
No
- 05.07.2022 SB2022070552
SB2008073101
#VU110165 - Buffer overflow
CVE-2008-1887
CWE-120 High
No
No
- 27.06.2022 SB2022062741
SB2008070105
#VU110146 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-4650
CWE-22 High
Available
No
2.7.6 rc1 27.06.2022 SB2022062742
SB2014110307
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189
CWE-918 Medium
No
No
3.6.14, 3.7.11, 3.8.9, 3.9.3 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
3.6.14, 3.7.11, 3.8.11, 3.9.5 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619
CWE-94 Medium
No
No
3.9.1 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more
#VU49973 - Memory corruption
CVE-2021-3177
CWE-119 High
No
No
- 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU110145 - Improper input validation
CVE-2013-1753
CWE-20 Medium
No
No
- 21.10.2020 SB2020102152
SB20200930128
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116
CWE-93 Medium
No
No
3.5.10, 3.6.12, 3.7.9, 3.8.5 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU32881 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20907
CWE-835 Medium
No
No
3.8.4 29.07.2020 SB2020071324
SB2020080201
SB2020082408
and 53 more
#VU110181 - Untrusted Search Path
CVE-2020-15801
CWE-426 High
No
No
3.7.9, 3.8.5 17.07.2020 SB2020092711
#VU29956 - Uncontrolled Search Path Element
CVE-2020-15523
CWE-427 High
No
No
3.8.4 15.07.2020 SB2020070501
SB2022120725
#VU29544 - Resource exhaustion
CVE-2020-14422
CWE-400 Medium
No
No
3.8.4 rc1 07.07.2020 SB2020070704
SB2020070705
SB2020070710
and 40 more
#VU110153 - Buffer overflow
CVE-2010-1450
CWE-120 Medium
No
No
2.5 _ 18.02.2020 SB2020021838
#VU110155 - Out-of-bounds write
CVE-2009-4134
CWE-787 Medium
No
No
2.5 _ 18.02.2020 SB2020021838


Showing elements 61 - 80 out of 117