CVE-2019-7653

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

• CWE-427

• https://bugs.debian.org/921751Exploit, Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00019.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00026.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4535-1/Third Party Advisory
• https://bugs.debian.org/921751Exploit, Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00019.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00026.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4535-1/Third Party Advisory

Published

Feb 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7644Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected …
• CVE-2019-7646CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8…
• CVE-2019-7648controller/fetchpwd.php and controller/doAction.php in Hotel…
• CVE-2019-7649global.encryptPassword in bootstrap/global.js in CMSWing 1.3…
• CVE-2019-7651EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 al…
• CVE-2019-7652TheHive Project UnshortenLink analyzer before 1.1, included …
• CVE-2019-7654Wowza Streaming Engine 4.8.0 and earlier suffers from multip…6.5
• CVE-2019-7655Wowza Streaming Engine 4.8.0 and earlier from multiple authe…5.4
• CVE-2019-7656A privilege escalation vulnerability in Wowza Streaming Engi…7.8
• CVE-2019-7659Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers…
• CVE-2019-7660An issue was discovered in PHPMyWind 5.5. The username param…
• CVE-2019-7661An issue was discovered in PHPMyWind 5.5. The method paramet…