https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:47:16.919445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-05512 cnvd-2018-05512 2026-10-09T11:47:16.924138+00:00 cnvd-2018-05512 https://cve.radiocsirt.org/vuln/euvd-2026-83971 EUVD-2026-83971 2026-10-09T11:47:16.924173+00:00 EUVD-2026-83971 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3954 fkie_cve-2016-3954 2026-10-09T11:47:16.924188+00:00

web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/simple_examples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957.

 https://cve.radiocsirt.org/vuln/ghsa-jr83-vr4j-mp6p GHSA-jr83-vr4j-mp6p — web2py exposure of sensitive information 2026-10-09T11:47:16.924217+00:00

Affected: PyPI: web2py

web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/simple_examples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957.

 https://cve.radiocsirt.org/vuln/gsd-2016-3954 gsd-2016-3954 2026-10-09T11:47:16.924241+00:00 gsd-2016-3954 https://cve.radiocsirt.org/vuln/pysec-2026-1062 PYSEC-2026-1062 — web2py exposure of sensitive information 2026-10-09T11:47:16.924253+00:00

Affected: PyPI: web2py

web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/simple_examples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-3954 UBUNTU-CVE-2016-3954 2026-10-09T11:47:16.924272+00:00

Affected: Ubuntu:16.04:LTS: web2py

web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/simple_examples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957.