pypi

5,089 tracked vulnerabilities.

CVE-2022-23915 HIGH
Weblate < 4.11.1 - Authenticated Remote Code Execution via Argument Injection
Mar 04, 2022
CVSS 7.2
EPSS 0.03
CVE-2022-21716 HIGH
Twisted 21.7.0-22.1.0 - Denial of Service via SSH Version Identifier Buffer Overflow
Mar 03, 2022
CVSS 7.5
EPSS 0.04
CVE-2022-0577 MEDIUM
scrapy < 2.6.1 - Exposure of Sensitive Information to an Unauthorized Actor
Mar 02, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-24719 LOW
Fluture-Node 4.0.0/1 - Info Disclosure
Mar 01, 2022
CVSS 2.6
EPSS 0.01
CVE-2022-24710 MEDIUM
Weblate < 4.11 - Stored Cross-Site Scripting via User Name and Language Fields
Feb 25, 2022
CVSS 5.4
EPSS 0.01
CVE-2022-24288 HIGH NUCLEI
Apache Airflow <2.2.4 - Command Injection
Feb 25, 2022
CVSS 8.8
EPSS 0.78
CVE-2022-23653 MEDIUM
B2 Command Line Tool < 3.2.0 - Local Key Disclosure via TOCTOU Race Condition
Feb 23, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-23651 MEDIUM
b2-sdk-python < 1.14.1 - Local Key Disclosure via TOCTOU Race Condition
Feb 23, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-0736 HIGH
mlflow/mlflow <1.23.1 - Info Disclosure
Feb 23, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-21712 HIGH
Twisted 11.1.0-22.1.0 - Origin Validation Error in RedirectAgent
Feb 07, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-23595 MEDIUM
TensorFlow < 2.5.3 - Null Pointer Dereference in XLA Compilation Cache
Feb 04, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-23594 HIGH
TensorFlow 2.7.0 - Out-of-bounds Read in TFG Dialect GraphDef Conversion
Feb 04, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-23593 MEDIUM
TensorFlow 2.7.0-2.8.0 - Denial of Service via Scalar Shape Handling in simplifyBroadcast
Feb 04, 2022
CVSS 5.9
EPSS 0.01
CVE-2022-23592 HIGH
TensorFlow 2.7.0-2.8.0 - Heap Out-of-Bounds Read via Type Inference
Feb 04, 2022
CVSS 8.1
EPSS 0.01
CVE-2022-23591 HIGH
TensorFlow < 2.5.3 - Denial of Service via Recursive GraphDef Function
Feb 04, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-23590 MEDIUM
TensorFlow < 2.7.1 - Denial of Service via Malicious GraphDef in SavedModel
Feb 04, 2022
CVSS 5.9
EPSS 0.01
CVE-2022-23589 MEDIUM
TensorFlow < 2.5.3 - NULL Pointer Dereference in Grappler Component
Feb 04, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-23588 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via SavedModel Grappler Optimizer
Feb 04, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-23587 HIGH
TensorFlow < 2.5.3 - Integer Overflow in Grappler Cost Estimation
Feb 04, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-23586 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via SavedModel Assertion Falsification
Feb 04, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-23585 MEDIUM
TensorFlow < 2.5.3 - Use-After-Free in PNG Image Decoder
Feb 04, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-23584 HIGH
TensorFlow < 2.5.3 - Use-After-Free in PNG Image Decoder
Feb 04, 2022
CVSS 7.6
EPSS 0.01
CVE-2022-23583 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via SavedModel Type Confusion
Feb 04, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-23582 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via SavedModel TensorByteSize CHECK Failure
Feb 04, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-23581 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via Grappler Optimizer SavedModel Manipulation
Feb 04, 2022
CVSS 6.5
EPSS 0.01