https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00666 bdu:2015-00666 https://cve.radiocsirt.org/vuln/bdu:2015-00666 https://cve.radiocsirt.org/vuln/euvd-2026-100182 EUVD-2026-100182 https://cve.radiocsirt.org/vuln/euvd-2026-100182 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4650 <p>The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.</p> <p>The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-4650 https://cve.radiocsirt.org/vuln/ghsa-33c8-ggqv-8g5p <p>The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.</p> <p>The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.</p> https://cve.radiocsirt.org/vuln/ghsa-33c8-ggqv-8g5p https://cve.radiocsirt.org/vuln/gsd-2014-4650 gsd-2014-4650 https://cve.radiocsirt.org/vuln/gsd-2014-4650 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0086-1 <p>Security update for python3</p> <p>Security update for python3</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0086-1 https://cve.radiocsirt.org/vuln/rhsa-2015:1064 <p>python: multiple unbound readline() DoS flaws in python stdlib python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding python: buffer overflow in socket.recvfrom_into() python: missing boundary check in JSON module python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs python: buffer() integer overflow leading to out of bounds read</p> <p>python: multiple unbound readline() DoS flaws in python stdlib python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding python: buffer overflow in socket.recvfrom_into() python: missing boundary check in JSON module python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs python: buffer() integer overflow leading to out of bounds read</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1064 https://cve.radiocsirt.org/vuln/suse-su-2015:1344-1 <p>Security update for python</p> <p>Security update for python</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1344-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-4650 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python2.7, Ubuntu:14.04:LTS: python3.4</p> <p>The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python2.7, Ubuntu:14.04:LTS: python3.4</p> <p>The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-4650 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2521 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code zur Ausführung zu bringen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code zur Ausführung zu bringen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2521