Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,934 results · page 28 of 39
Nov 7, 2022The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-43304 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.
- Product
- D8s-timer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 7, 2022The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-43303 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.
- Product
- D8s-strings
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 6, 2022Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration.CVE-2022-42919 · Other software · Python · reported by MITREHigh 7.8
Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.
- Product
- Python
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 16, 2022The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository wiCVE-2022-42969 · Other software · Pytest · reported by MITREMedium 5.3
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.
- Product
- PY
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42044 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.
- Product
- D8s-asns
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42043 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.
- Product
- D8s-xml
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42042 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0.
- Product
- D8s-networking
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42041 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0.
- Product
- D8s-file-system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42040 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.
- Product
- D8s-algorithms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42039 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.
- Product
- D8s-lists
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42038 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
- Product
- D8s-ip-addresses
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42037 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
- Product
- D8s-asns
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-42036 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
- Product
- D8s-urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41387 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- Product
- D8s-pdfs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41386 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- Product
- D8s-utility
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41385 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- Product
- D8s-html
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41384 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- Product
- D8s-domains
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41383 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-archives
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41382 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-json
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41381 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-utility
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41380 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-yaml
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 6, 2022dparse is a parser for Python dependency files.CVE-2022-39280 · Other software · pyupio · reported by GitHubMedium 5.9
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version `0.5.2`, all the users are advised to upgrade to `0.5.2` as soon as possible. Users unable to upgrade should avoid passing index server URLs in the source file to be parsed.
- Product
- dparse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 29, 2022matrix-nio is a Python Matrix client library, designed according to sans I/O principles.CVE-2022-39254 · Other software · poljar · reported by GitHubHigh 8.6
matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room key came from. This allows homeservers to try to insert room keys of questionable validity, potentially mounting an impersonation attack. Version 0.20 fixes the issue.
- Product
- matrix-nio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2022python-jwt is a module for generating and verifying JSON Web Tokens.CVE-2022-39227 · Other software · davedoesdev · reported by GitHubCritical 9.1
python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secret key. Depending on the application, this may for example enable the attacker to spoof other user's identities, hijack their sessions, or bypass authentication. Users should upgrade to version 3.3.4. There are no known workarounds.
- Product
- python-jwt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2022Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code.CVE-2022-28802 · Other software · Zapier · reported by MITRECritical 9.9
Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other words, Code by Zapier was providing a customer-controlled general-purpose virtual machine that unintentionally granted full access to all users of a company's account, but was supposed to enforce role-based access control within that company's account. Before 2022-08-17, a customer could have resolved this by (in effect) using a separate virtual machine for an application that held credentials - or other secrets - that weren't supposed to be shared among all of its employees. (Multiple accounts would have been needed to operate these independent virtual machines.)
- Product
- Code BY Zapier
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40812 · Other software · Democritus Pdfs Project · reported by MITRECritical 9.8
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- Democritus Pdfs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40810 · Other software · Democritus IP Addresses Project · reported by MITRECritical 9.8
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus IP Addresses
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40809 · Other software · Democritus Dicts Project · reported by MITRECritical 9.8
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Dicts
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40432 · Other software · D8s-strings Project · reported by MITRECritical 9.8
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
- Product
- D8s-strings
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40431 · Other software · D8s-pdfs Project · reported by MITRECritical 9.8
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-pdfs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40430 · Other software · D8s-utility Project · reported by MITRECritical 9.8
The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-utility
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40429 · Other software · D8s-ip-addresses Project · reported by MITRECritical 9.8
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-ip-addresses
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40428 · Other software · D8s-mpeg Project · reported by MITRECritical 9.8
The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s Mpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40426 · Other software · D8s-asns Project · reported by MITRECritical 9.8
The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-asns
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40425 · Other software · D8s-html Project · reported by MITRECritical 9.8
The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-html
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38887 · Other software · D8s-python Project · reported by MITRECritical 9.8
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-python
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38886 · Other software · D8s-xml Project · reported by MITRECritical 9.8
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-xml
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38885 · Other software · D8s-netstrings Project · reported by MITRECritical 9.8
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-netstrings
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38884 · Other software · D8s-grammars Project · reported by MITRECritical 9.8
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-grammars
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38883 · Other software · D8s-math Project · reported by MITRECritical 9.8
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-math
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38882 · Other software · D8s-json Project · reported by MITRECritical 9.8
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-json
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38881 · Other software · D8s-archives Project · reported by MITRECritical 9.8
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-archives
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40811 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40808 · Other software · Democritus Dates Project · reported by MITRECritical 9.8
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Dates
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40807 · Other software · Democritus Domains Project · reported by MITRECritical 9.8
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Domains
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40806 · Other software · Democritus Uuids Project · reported by MITRECritical 9.8
The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Uuids
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40805 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package.
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40427 · Other software · Democritus Domains Project · reported by MITRECritical 9.8
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0
- Product
- Democritus Domains
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40424 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38880 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0.
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.