pypi
5,077 tracked vulnerabilities.
CVE-2022-24294
HIGH
Apache MXNet < 1.9.1 - Denial of Service via Crafted Operator Name
Jul 24, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-34501
CRITICAL
bin-collection <0.1 - Code Injection
Jul 22, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-34500
CRITICAL
bin-collect < 0.1 - Remote Code Execution via Malicious PyPI Package
Jul 22, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-33891
HIGH
KEVNUCLEI
Apache Spark UI - Privilege Escalation
Jul 18, 2022
CVSS 8.8
EPSS 0.93
CVE-2022-31153
MEDIUM
OpenZeppelin Contracts for Cairo <0.2.0 - Info Disclosure
Jul 15, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-30187
MEDIUM
Azure Storage Library < 12.13.0 - Information Disclosure via Broken Cryptographic Algorithm
Jul 12, 2022
CVSS 4.7
EPSS 0.01
CVE-2022-25303
MEDIUM
whoogle-search < 0.7.2 - Cross-Site Scripting via Query String Parameter
Jul 12, 2022
CVSS 5.4
EPSS 0.01
CVE-2022-31573
CRITICAL
chainer/chainerrl-visualizer <0.1.1 - Path Traversal
Jul 11, 2022
CVSS 9.3
EPSS 0.01
CVE-2022-31558
CRITICAL
Tooxie/Shiva-Server <0.10.0 - Path Traversal
Jul 11, 2022
CVSS 9.3
EPSS 0.01
CVE-2022-31507
CRITICAL
ganga-devs/ganga <8.5.10 - Path Traversal
Jul 11, 2022
CVSS 9.3
EPSS 0.02
CVE-2022-31506
CRITICAL
cmusatyalab/opendiamond <10.1.1 - Path Traversal
Jul 11, 2022
CVSS 9.3
EPSS 0.01
CVE-2022-35411
CRITICAL
rpc.py < 0.6.0 - Unauthenticated Remote Code Execution via Pickle Deserialization
Jul 08, 2022
CVSS 9.8
EPSS 0.46
CVE-2022-35410
HIGH
mat2 < 0.13.0 - Path Traversal via ZIP Archive Cleaning
Jul 08, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-31124
HIGH
openssh_key_parser <0.0.6 - Info Disclosure
Jul 06, 2022
CVSS 7.7
EPSS 0.01
CVE-2022-31117
MEDIUM
UltraJSON <5.4.0 - Memory Corruption
Jul 05, 2022
CVSS 5.9
EPSS 0.02
CVE-2022-31116
HIGH
ultrajson < 5.4.0 - Key Confusion and Value Overwrite via Improper Surrogate Pair Decoding
Jul 05, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-2309
HIGH
lxml < 4.9.1 - Denial of Service via iterwalk Function
Jul 05, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-34265
CRITICAL
NUCLEI
Django 3.2-3.2.14 - SQL Injection via Trunc() and Extract() Database Functions
Jul 04, 2022
CVSS 9.8
EPSS 0.73
CVE-2022-31605
CRITICAL
NVFLARE < 2.1.2 - Remote Code Execution via Unsafe YAML Deserialization
Jul 01, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-31604
CRITICAL
NVIDIA NVFLARE < 2.1.2 - Remote Code Execution via Unsafe Pickle Deserialization
Jul 01, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-31052
MEDIUM
Synapse < 1.61.1 - Denial of Service via URL Preview Recursion
Jun 28, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-26477
HIGH
Apache SystemDS < 2.2.1 - Uncontrolled Resource Consumption via For Loop Termination Condition
Jun 27, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-33146
MEDIUM
web2py < 2.22.5 - Open Redirect via Crafted URL
Jun 27, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-34056
CRITICAL
Watertools 0.0.0 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-34055
CRITICAL
drxhello 0.0.1 - Remote Code Execution via Malicious request Package Dependency
Jun 24, 2022
CVSS 9.8
EPSS 0.02
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
pgadmin4 26
openbabel 24
litellm 23
Quick Filters