Known vulnerabilities in Python for Scientific Computing - page 2

Vendor: Splunk Inc.
Software: Python for Scientific Computing
Software CPE: cpe:2.3:a:splunk:python_for_scientific_computing:*:*:*:*:*:*:*:*
Website: https://www.splunk.com/
Total vulnerabilities: 50
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Python for Scientific Computing Python for Scientific Computing is affected by 50 known vulnerabilities: 8 high, 28 medium, 14 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109603 - Deserialization of Untrusted Data
CVE-2025-32434		 CWE-502 High
Available
No
 3.2.3, 4.2.3 21.05.2025 SB20250521126
SB2025061310
SB2026011967
and 3 more
#VU95800 - Use After Free
CVE-2024-31583		 CWE-416 Low
No
No
 4.2.1 13.08.2024 SB2024081325
SB2024081330
SB2024082740
and 3 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 3.2.2, 4.2.2 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 4.2.1 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 4.2.1 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU88853 - Incorrect Regular Expression
CVE-2024-3772		 CWE-185 Medium
No
No
 4.2.1 19.04.2024 SB2024041926
SB2024041929
SB2024041930
and 8 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 4.2.1 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU87690 - Out-of-bounds read
CVE-2024-27319		 CWE-125 Medium
No
No
 4.2.1 21.03.2024 SB2024032130
SB2024032132
SB2024032133
and 2 more
#VU87689 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-27318		 CWE-22 Medium
No
No
 4.2.1 21.03.2024 SB2024032130
SB2024032132
SB2024032133
and 2 more
#VU85872 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45907		 CWE-94 High
No
No
 4.2.1 29.01.2024 SB2022112602
SB2024012927
SB2024013005
and 6 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 4.2.1 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 4.2.1 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 4.2.1 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 4.2.1 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU78289 - Missing release of memory after effective lifetime
CVE-2023-25399		 CWE-401 Low
No
No
 4.2.1 16.07.2023 SB2023071615
SB2023071617
SB2023071724
and 8 more
#VU77305 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-28473		 CWE-444 High
No
No
 4.2.1 14.06.2023 SB2023061435
SB2023071811
SB2021030542
and 3 more
#VU75176 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-25882		 CWE-22 Medium
No
No
 4.2.1 17.04.2023 SB2023041724
SB2024013005
SB2024022732
and 1 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899		 CWE-185 Medium
No
No
 4.2.1 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU63912 - Security Features
CVE-2022-31799		 CWE-254 Medium
No
No
 4.2.1 01.06.2022 SB2022060117
SB2022061201
SB2022072635
and 13 more
#VU61602 - Incorrect Comparison
CVE-2021-34141		 CWE-697 Low
No
No
 4.2.1 24.03.2022 SB2022032416
SB2022071951
SB2022080415
and 8 more


Showing elements 21 - 40 out of 50