pypi

5,077 tracked vulnerabilities.

CVE-2022-2996 HIGH
python-scciclient < 0.12.0 - Improper Certificate Validation
Sep 01, 2022
CVSS 7.4
EPSS 0.01
CVE-2022-0718 MEDIUM
Python Oslo-Utils - Info Disclosure
Aug 29, 2022
CVSS 4.9
EPSS 0.01
CVE-2022-34668 CRITICAL
NVFLARE < 2.1.4 - Remote Code Execution via Pickle Deserialization
Aug 29, 2022
CVSS 9.8
EPSS 0.09
CVE-2022-38792 CRITICAL
exotel-py 0.1.6 - Remote Code Execution via Malicious Backdoor
Aug 27, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-2255 HIGH
mod_wsgi < 4.9.3 - Unauthenticated Header Spoofing via X-Client-IP
Aug 25, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-25304 HIGH
asyncua and opcua - Denial of Service via Unlimited Chunk Reception
Aug 23, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-1930 MEDIUM
eth-account < 0.5.9 - Denial of Service via encode_structured_data Method
Aug 22, 2022
CVSS 5.9
EPSS 0.01
CVE-2022-2930 HIGH
octoprint/octoprint <1.8.3 - Info Disclosure
Aug 22, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36024 HIGH
py-cord <2.0.1 - DoS
Aug 18, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-38362 HIGH
Apache Airflow Docker <3.0.0 - Authenticated RCE
Aug 16, 2022
CVSS 8.8
EPSS 0.02
CVE-2022-2822 HIGH
OctoPrint - Authentication Bypass via Brute Force
Aug 15, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-36359 HIGH
Django 3.2-3.2.15 and 4.0-4.0.7 - Reflected File Download via User-Supplied Filename in FileResponse
Aug 03, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-37394 LOW
OpenStack Nova < 23.2.2, 24.x < 24.1.2, 25.x < 25.0.2 - Authenticated Denial of Service via VNIC Type Change
Aug 03, 2022
CVSS 3.3
EPSS 0.00
CVE-2022-35920 HIGH
sanic <20.12.7 and 22.0.0-22.6.1 - Path Traversal via Encoded %2F URLs
Aug 01, 2022
CVSS 8.3
EPSS 0.01
CVE-2022-35918 MEDIUM
Streamlit 0.63.0-1.11.0 - Path Traversal via Malicious URL
Aug 01, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-31177 LOW
Flask-AppBuilder <4.1.3 - Info Disclosure
Aug 01, 2022
CVSS 2.7
EPSS 0.01
CVE-2022-2589 MEDIUM
fava < 1.22.3 - Reflected Cross-Site Scripting
Aug 01, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-36447 HIGH
Chia Network CAT1 Standard 1.0.0 - Info Disclosure
Jul 29, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-34558 CRITICAL
WMAgent v1.3.3rc2-1.3.3rc1 & reqmgr 2 v1.4.0rc2 - RCE
Jul 28, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-34529 MEDIUM
wasm3 v0.5.0 - Out-of-bounds Read via Compile_Memory_CopyFill
Jul 27, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-33977 HIGH
untangle < 1.2.0 - Denial of Service via XML Entity Expansion
Jul 26, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-31471 HIGH
untangle < 1.2.0 - XML External Entity Injection
Jul 26, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-34749 HIGH
mistune < 2.0.2 - Inefficient Regular Expression Complexity
Jul 25, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-2523 MEDIUM
fava < 1.22.2 - Reflected Cross-Site Scripting
Jul 25, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-2514 MEDIUM
Fava < 1.22 - Reflected Cross-Site Scripting via Time and Filter Parameters
Jul 25, 2022
CVSS 6.1
EPSS 0.01
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 pgadmin4 26 openbabel 24 litellm 23
Quick Filters
Critical CVEs With Exploits In CISA KEV