pypi

5,077 tracked vulnerabilities.

CVE-2022-34054 CRITICAL
Perdido 0.0.1-0.0.2 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-34053 CRITICAL
DR-Web-Engine 0.2.0b0 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33004 CRITICAL
Beginner 0.0.2-0.0.4 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33003 CRITICAL
watools 0.0.1-0.0.8 - Remote Code Execution via Malicious request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33002 CRITICAL
KGExplore 0.1.1-0.1.2 - Backdoor Code Execution via request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33001 CRITICAL
AAmiles 0.1.0 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-33000 CRITICAL
ML-Scanner 0.1.0-0.1.5 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32999 CRITICAL
cloudlabeling 0.0.1 - Remote Code Execution via Malicious request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32998 CRITICAL
cryptoasset-data-downloader <1.0.1 - Code Injection
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32997 CRITICAL
RootInteractive <0.0.5-0.0.19b0 - RCE
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-32996 CRITICAL
django-navbar-client 0.9.50-1.0.1 - Remote Code Execution via Malicious Request Package
Jun 24, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-22967 HIGH
SaltStack Salt < 3002.9 - Incorrect Authorization for Locked PAM Accounts
Jun 23, 2022
CVSS 8.8
EPSS 0.02
CVE-2022-2112 HIGH
inventree/inventree <0.7.2 - Info Disclosure
Jun 17, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-2111 HIGH
InvenTree < 0.7.2 - Unrestricted Upload of File with Dangerous Type
Jun 17, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-29241 HIGH
Jupyter Server <1.17.1 - Info Disclosure
Jun 14, 2022
CVSS 7.1
EPSS 0.01
CVE-2022-29238 MEDIUM
Jupyter Notebook <6.4.12 - Info Disclosure
Jun 14, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-2054 HIGH
Nuitka < 0.9 - Code Injection
Jun 12, 2022
CVSS 8.4
EPSS 0.01
CVE-2022-32563 CRITICAL
Couchbase Sync Gateway 3.0.0-3.0.1 - Unauthenticated Privilege Escalation via X.509 Certificate Authentication Bypass
Jun 10, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-31027 MEDIUM
OAuthenticator < 15.0.0 - Authorization Bypass via CILogonOAuthenticator Email Domain Validation
Jun 09, 2022
CVSS 4.2
EPSS 0.00
CVE-2022-29255 HIGH
vyper < 0.3.4 - Always-Incorrect Control Flow Implementation in External Contract Calls
Jun 09, 2022
CVSS 8.2
EPSS 0.01
CVE-2022-24840 CRITICAL
django-s3file < 5.5.1 - Path Traversal in AWS S3 Bucket
Jun 09, 2022
CVSS 9.1
EPSS 0.02
CVE-2022-31313 CRITICAL
api-res-py 0.1 - Remote Code Execution via Malicious Request Package
Jun 08, 2022
CVSS 9.8
EPSS 0.02
CVE-2022-24065 HIGH
cookiecutter <2.1.1 - Command Injection
Jun 08, 2022
CVSS 8.1
EPSS 0.04
CVE-2022-29773 MEDIUM
AlekSIS-Core <2.8.1 - Info Disclosure
Jun 03, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-31799 CRITICAL
Bottle < 0.12.20 - Denial of Service via Early Request Binding Error Handling
Jun 02, 2022
CVSS 9.8
EPSS 0.02