Vulnerabilities > Numfocus

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-15	CVE-2020-13091	Deserialization of Untrusted Data vulnerability in Numfocus Pandas pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. network low complexity numfocus CWE-502 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Numfocus {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Numfocus"}]}

Vulnerabilities > Numfocus