pypi

5,089 tracked vulnerabilities.

CVE-2021-3620 MEDIUM
Ansible < 2.9.27 - Sensitive Information Disclosure in Error Messages
Mar 03, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-3654 MEDIUM NUCLEI
OpenStack Nova < 21.2.3 - Open Redirect via noVNC Console Proxy
Mar 02, 2022
CVSS 6.1
EPSS 0.27
CVE-2021-45229 MEDIUM
Apache Airflow < 2.2.3 - Stored Cross-Site Scripting via Trigger DAG Origin Query Argument
Feb 25, 2022
CVSS 6.1
EPSS 0.03
CVE-2021-45083 HIGH
Cobbler < 3.3.1 - Unauthenticated Sensitive Information Exposure via World-Readable Configuration Files
Feb 20, 2022
CVSS 7.1
EPSS 0.00
CVE-2021-45082 HIGH
Cobbler < 3.3.1 - Remote Code Execution via Cheetah Template Import Bypass
Feb 19, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-44451 MEDIUM NUCLEI
Apache Superset <= 1.3.2 - Authenticated Database Connection Password Exposure
Feb 01, 2022
CVSS 6.5
EPSS 0.08
CVE-2021-44255 HIGH
MotionEye <= 0.42.1 and MotionEyeOS <= 20200606 - Authenticated Remote Code Execution via Malicious Configuration Backup
Jan 31, 2022
CVSS 7.2
EPSS 0.03
CVE-2021-32849 HIGH
gerapy < 0.9.9 - Authenticated OS Command Injection
Jan 26, 2022
CVSS 8.8
EPSS 0.08
CVE-2021-22570 MEDIUM
Google Protobuf < 3.15.0 - Null Pointer Dereference via Proto Symbol Parsing
Jan 26, 2022
CVSS 6.5
EPSS 0.03
CVE-2021-45230 MEDIUM
Apache Airflow <2.2.0 - Privilege Escalation
Jan 20, 2022
CVSS 6.5
EPSS 0.02
CVE-2021-44217 MEDIUM
Ericsson CodeChecker < 6.18.0 - Stored Cross-Site Scripting via Reports Viewer Comments
Jan 18, 2022
CVSS 6.1
EPSS 0.02
CVE-2021-4164 HIGH
calibre-web < 0.6.15 - Cross-Site Request Forgery
Jan 17, 2022
CVSS 8.8
EPSS 0.01
CVE-2021-4171 CRITICAL
calibre-web < 0.6.15 - Business Logic Errors
Jan 17, 2022
CVSS 9.8
EPSS 0.01
CVE-2021-4170 MEDIUM
calibre-web < 0.6.15 - Cross-Site Scripting
Jan 16, 2022
CVSS 5.4
EPSS 0.01
CVE-2021-44649 MEDIUM
django-cms 3.4.0-3.4.6 and 3.7.0-3.7.3 - Cross-Site Scripting via Plugin Type Parameter
Jan 12, 2022
CVSS 5.4
EPSS 0.01
CVE-2021-45452 MEDIUM
Django 2.2-2.2.25, 3.2-3.2.10, 4.0-4.0.0 - Path Traversal via Storage.save
Jan 05, 2022
CVSS 5.3
EPSS 0.02
CVE-2021-45116 HIGH
Django 2.2-2.2.25, 3.2-3.2.10, 4.0-4.0.0 - Information Disclosure via dictsort Template Filter
Jan 05, 2022
CVSS 7.5
EPSS 0.02
CVE-2021-45115 HIGH
Django <2.2.26, 3.2.<11, 4.0.<1 - DoS
Jan 05, 2022
CVSS 7.5
EPSS 0.02
CVE-2021-3842 HIGH
nltk < 3.6.6 - Inefficient Regular Expression Complexity
Jan 04, 2022
CVSS 7.5
EPSS 0.01
CVE-2021-45958 MEDIUM
ultrajson < 5.2.0 - Stack-based Buffer Overflow via Indentation Handling
Jan 01, 2022
CVSS 5.5
EPSS 0.02
CVE-2021-23727 HIGH
celery < 5.2.2 - Stored Command Injection via Backend Metadata Deserialization
Dec 29, 2021
CVSS 7.5
EPSS 0.04
CVE-2021-43857 CRITICAL
Gerapy < 0.9.8 - Remote Code Execution
Dec 27, 2021
CVSS 9.8
EPSS 0.55
CVE-2021-4162 MEDIUM
archivy < 1.6.1 - Cross-Site Request Forgery
Dec 25, 2021
CVSS 4.3
EPSS 0.00
CVE-2021-4118 HIGH
pytorch_lightning < 1.6.0 - Remote Code Execution via Pickle Deserialization
Dec 23, 2021
CVSS 7.8
EPSS 0.01
CVE-2021-43854 HIGH
nltk < 3.6.5 - Regular Expression Denial of Service in PunktSentenceTokenizer
Dec 23, 2021
CVSS 7.5
EPSS 0.03
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 pgadmin4 26 openbabel 24 litellm 23
Quick Filters
Critical CVEs With Exploits In CISA KEV