https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:40:21.350046+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04508 bdu:2020-04508 2026-10-03T02:40:21.805678+00:00 bdu:2020-04508 https://cve.radiocsirt.org/vuln/bell-cve-2019-16935 Withdrawn: BELL-CVE-2019-16935 — CVE-2019-16935 does not affect BellSoft software 2026-10-03T02:40:21.805736+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T02:40:21.805756+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cleanstart-2026-bm51903 Withdrawn: CLEANSTART-2026-BM51903 — Security fixes for CVE-2015-20107, CVE-2015-2104, CVE-2019-16056, CVE-2019-16935, CVE-2019-20907, CVE-2019-5010, CVE-20… 2026-10-03T02:40:21.805773+00:00

Withdrawn by the publisher.

Affected: CleanStart: python3

Multiple security vulnerabilities affect the python3 package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-58000 EUVD-2026-58000 2026-10-03T02:40:21.805806+00:00 EUVD-2026-58000 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16935 fkie_cve-2019-16935 2026-10-03T02:40:21.805818+00:00

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.

 https://cve.radiocsirt.org/vuln/ghsa-qhmv-wcg2-h8hx GHSA-qhmv-wcg2-h8hx 2026-10-03T02:40:21.805840+00:00

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.

 https://cve.radiocsirt.org/vuln/gsd-2019-16935 gsd-2019-16935 2026-10-03T02:40:21.805856+00:00 gsd-2019-16935 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2389-1 openSUSE-SU-2019:2389-1 — Security update for python 2026-10-03T02:40:21.805867+00:00

Security update for python

 https://cve.radiocsirt.org/vuln/rhsa-2020:4285 RHSA-2020:4285 — Red Hat Security Advisory: rh-python36 security, bug fix, and enhancement update 2026-10-03T02:40:21.805885+00:00

python: XSS vulnerability in the documentation XML-RPC server in server_title field python: CRLF injection via the host part of the url passed to urlopen() python: infinite loop in the tarfile module via crafted TAR archive python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS python: DoS via inefficiency in IPv{4,6}Interface classes python: CRLF injection via HTTP request method in httplib/http.client

 https://cve.radiocsirt.org/vuln/suse-su-2019:2743-1 SUSE-SU-2019:2743-1 — Security update for python 2026-10-03T02:40:21.805921+00:00

Security update for python

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-16935 UBUNTU-CVE-2019-16935 2026-10-03T02:40:21.805938+00:00

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:16.04:LTS: python2.7, Ubuntu:16.04:LTS: python3.5, Ubuntu:18.04:LTS: python2.7, Ubuntu:18.04:LTS: python3.6

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1595 WID-SEC-W-2024-1595 — Python: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T02:40:21.805968+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.