pypi
5,015 tracked vulnerabilities.
CVE-2022-35410
HIGH
mat2 < 0.13.0 - Path Traversal via ZIP Archive Cleaning
Jul 08, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-31124
HIGH
openssh_key_parser <0.0.6 - Info Disclosure
Jul 06, 2022
CVSS 7.7
EPSS 0.01
CVE-2022-31117
MEDIUM
UltraJSON <5.4.0 - Memory Corruption
Jul 05, 2022
CVSS 5.9
EPSS 0.02
CVE-2022-31116
HIGH
ultrajson < 5.4.0 - Key Confusion and Value Overwrite via Improper Surrogate Pair Decoding
Jul 05, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-2309
HIGH
lxml < 4.9.1 - Denial of Service via iterwalk Function
Jul 05, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-34265
CRITICAL
NUCLEI
Django 3.2-3.2.14 - SQL Injection via Trunc() and Extract() Database Functions
Jul 04, 2022
CVSS 9.8
EPSS 0.73
CVE-2022-31605
CRITICAL
NVFLARE < 2.1.2 - Remote Code Execution via Unsafe YAML Deserialization
Jul 01, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-31604
CRITICAL
NVIDIA NVFLARE < 2.1.2 - Remote Code Execution via Unsafe Pickle Deserialization
Jul 01, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-31052
MEDIUM
Synapse < 1.61.1 - Denial of Service via URL Preview Recursion
Jun 28, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-26477
HIGH
Apache SystemDS < 2.2.1 - Uncontrolled Resource Consumption via For Loop Termination Condition
Jun 27, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-33146
MEDIUM
web2py < 2.22.5 - Open Redirect via Crafted URL
Jun 27, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-34056
CRITICAL
Watertools 0.0.0 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-34055
CRITICAL
drxhello 0.0.1 - Remote Code Execution via Malicious request Package Dependency
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-34054
CRITICAL
Perdido 0.0.1-0.0.2 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-34053
CRITICAL
DR-Web-Engine 0.2.0b0 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33004
CRITICAL
Beginner 0.0.2-0.0.4 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33003
CRITICAL
watools 0.0.1-0.0.8 - Remote Code Execution via Malicious request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33002
CRITICAL
KGExplore 0.1.1-0.1.2 - Backdoor Code Execution via request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33001
CRITICAL
AAmiles 0.1.0 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33000
CRITICAL
ML-Scanner 0.1.0-0.1.5 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32999
CRITICAL
cloudlabeling 0.0.1 - Remote Code Execution via Malicious request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32998
CRITICAL
cryptoasset-data-downloader <1.0.1 - Code Injection
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32997
CRITICAL
RootInteractive <0.0.5-0.0.19b0 - RCE
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32996
CRITICAL
django-navbar-client 0.9.50-1.0.1 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-22967
HIGH
SaltStack Salt < 3002.9 - Incorrect Authorization for Locked PAM Accounts
Jun 23, 2022
CVSS 8.8
EPSS 0.02
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
Plone 96
open-webui 87
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 52
vllm 50
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
pypdf 28
PraisonAI 27
pgadmin4 26
langflow 24
openbabel 24
litellm 23
Quick Filters