CyberSecBulletin

Democritus vulnerabilities

We track 26 vulnerabilities in Democritus products across 19 products. 26 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2022.

26vulnerabilities
25critical
1high
0exploited
9.8average CVSS score

Latest Democritus vulnerabilities

  • 9.8 Critical severity

    D8s-xml: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44054DemocritusEPSS 1.37%

    The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0.

  • 9.8 Critical severity

    D8s-networking: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44053DemocritusEPSS 1.27%

    The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm

  • 9.8 Critical severity

    D8s-dates: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44052DemocritusEPSS 1.36%

    The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.

  • 9.8 Critical severity

    D8s-stats: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44051DemocritusEPSS 1.39%

    The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0.

  • 9.8 Critical severity

    D8s-networking: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44050DemocritusEPSS 1.36%

    The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-json package. The affected version of d8s-htm is 0.1.

  • 9.8 Critical severity

    D8s-python: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44049DemocritusEPSS 1.39%

    The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.

  • 9.8 Critical severity

    D8s-urls: Unrestricted Upload of File with Dangerous Type

    CVE-2022-44048DemocritusEPSS 1.39%

    The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0.

  • 8.8 High severity

    D8s-timer: Unrestricted Upload of File with Dangerous Type

    CVE-2022-43306DemocritusEPSS 1.33%

    The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.

  • 9.8 Critical severity

    D8s-python: Unrestricted Upload of File with Dangerous Type

    CVE-2022-43305DemocritusEPSS 1.44%

    The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.

  • 9.8 Critical severity

    D8s-timer: Unrestricted Upload of File with Dangerous Type

    CVE-2022-43304DemocritusEPSS 1.44%

    The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.

  • 9.8 Critical severity

    D8s-strings: Unrestricted Upload of File with Dangerous Type

    CVE-2022-43303DemocritusEPSS 1.44%

    The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.

  • 9.8 Critical severity

    D8s-asns: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42044DemocritusEPSS 1.67%

    The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-xml: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42043DemocritusEPSS 1.67%

    The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-algorithms: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42040DemocritusEPSS 6.66%

    The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-lists: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42039DemocritusEPSS 1.67%

    The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-ip-addresses: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42038DemocritusEPSS 1.74%

    The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-asns: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42037DemocritusEPSS 1.67%

    The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-urls: Unrestricted Upload of File with Dangerous Type

    CVE-2022-42036DemocritusEPSS 1.67%

    The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-pdfs: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41387DemocritusEPSS 1.67%

    The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-utility: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41386DemocritusEPSS 1.67%

    The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-html: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41385DemocritusEPSS 1.67%

    The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-domains: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41384DemocritusEPSS 1.67%

    The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-archives: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41383DemocritusEPSS 1.67%

    The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-json: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41382DemocritusEPSS 1.74%

    The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-utility: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41381DemocritusEPSS 1.67%

    The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.

  • 9.8 Critical severity

    D8s-yaml: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41380DemocritusEPSS 1.67%

    The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.