| Max CVSS | 6.4 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-4940 | 2.6 |
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote a
|
13-02-2023 - 03:24 | 27-06-2012 - 10:18 | |
| CVE-2011-4944 | 1.9 |
Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
|
25-10-2019 - 11:53 | 27-08-2012 - 23:55 | |
| CVE-2011-1521 | 6.4 |
The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (r
|
25-10-2019 - 11:53 | 24-05-2011 - 23:55 | |
| CVE-2012-1150 | 5.0 |
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU
|
25-10-2019 - 11:53 | 05-10-2012 - 21:55 | |
| CVE-2012-0845 | 5.0 |
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that
|
25-10-2019 - 11:53 | 05-10-2012 - 21:55 |