https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:50:13 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-663 certa-2012-avi-663 https://cve.radiocsirt.org/vuln/certa-2012-avi-663 https://cve.radiocsirt.org/vuln/euvd-2026-117090 EUVD-2026-117090 https://cve.radiocsirt.org/vuln/euvd-2026-117090 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4940 <p>The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.</p> <p>The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4940 https://cve.radiocsirt.org/vuln/ghsa-cr6h-6cqx-mw3f <p>The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.</p> <p>The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.</p> https://cve.radiocsirt.org/vuln/ghsa-cr6h-6cqx-mw3f https://cve.radiocsirt.org/vuln/gsd-2011-4940 gsd-2011-4940 https://cve.radiocsirt.org/vuln/gsd-2011-4940 https://cve.radiocsirt.org/vuln/jvndb-2012-000063 <p>The SimpleHTTPServer in Python contains a cross-site scripting vulnerability. Keigo Yamazaki of Little eArth Corporation Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>The SimpleHTTPServer in Python contains a cross-site scripting vulnerability. Keigo Yamazaki of Little eArth Corporation Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2012-000063 https://cve.radiocsirt.org/vuln/rhsa-2012:0744 <p>python: potential XSS in SimpleHTTPServer&#39;s list_directory() python: distutils creates ~/.pypirc insecurely python: SimpleXMLRPCServer CPU usage DoS via malformed XML-RPC request python: hash table collisions CPU usage DoS (oCERT-2011-003)</p> <p>python: potential XSS in SimpleHTTPServer&#39;s list_directory() python: distutils creates ~/.pypirc insecurely python: SimpleXMLRPCServer CPU usage DoS via malformed XML-RPC request python: hash table collisions CPU usage DoS (oCERT-2011-003)</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0744