CVE-2023-25399
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-25399
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SciPy 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SciPy是Scipy社区的所开发的一个开源的Python算法库和数学、科学、工程计算包，它包含了线性代数、积分、特殊函数等计算模块。 SciPy 存在安全漏洞，该漏洞源于在Py_FindObjects()函数中存在导致潜在内存泄漏的重新计数问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2023-25399
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-25399
请登录查看更多情报信息。
Same Patch Batch · n/a · 2023-07-05 · 21 CVEs total
| CVE-2023-3089 | 7.0 HIGH | Ocp & fips mode |
| CVE-2023-33335 | Sophos iView 跨站脚本漏洞 | |
| CVE-2023-27197 | PAX Technology A930 安全漏洞 | |
| CVE-2023-27198 | PAX Technology A930 操作系统命令注入漏洞 | |
| CVE-2023-27199 | PAX Technology A930 安全漏洞 | |
| CVE-2023-34654 | taoCMS 跨站脚本漏洞 | |
| CVE-2023-36622 | Loxone Miniserver 操作系统命令注入漏洞 | |
| CVE-2023-36623 | Loxone Miniserver 信任管理问题漏洞 | |
| CVE-2023-36624 | Loxone Miniserver 安全漏洞 | |
| CVE-2023-30207 | Kodi Home Theater Software 数字错误漏洞 | |
| CVE-2020-23452 | Selenium Grid 跨站脚本漏洞 | |
| CVE-2023-35863 | MADEFORNET HTTP Debugger 竞争条件问题漏洞 | |
| CVE-2023-36932 | Progress Software MOVEit Transfer SQL注入漏洞 | |
| CVE-2023-36933 | Progress Software MOVEit Transfer 安全漏洞 | |
| CVE-2023-36934 | Progress Software MOVEit Transfer SQL注入漏洞 | |
| CVE-2020-25969 | gnuplot 安全漏洞 | |
| CVE-2023-36665 | protobuf.js 安全漏洞 | |
| CVE-2023-35786 | ZOHO ManageEngine ADManager Plus 代码问题漏洞 | |
| CVE-2022-42175 | SolusVM-WHMCS-Module 安全漏洞 | |
| CVE-2023-33201 | Bouncy Castle 信任管理问题漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2023-25399
No comments yet