pypi
5,089 tracked vulnerabilities.
CVE-2021-41500
HIGH
cvxopt <= 1.2.6 - Denial of Service via Fake Capsule Object in cholmod APIs
Dec 17, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-41499
HIGH
pyo < 1.03 - Denial of Service via Server_debug Function Buffer Overflow
Dec 17, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-41498
HIGH
pyo < 1.0.4 - Denial of Service via Server Name Buffer Overflow in Server_jack_init
Dec 17, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-41497
HIGH
RaRe-Technologies bounter 1.01 and 1.10 - Denial of Service via CMS_Conservative_increment_obj Null Pointer Dereference
Dec 17, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-41496
MEDIUM
NumPy < 1.19.0 - Denial of Service via Negative Array Dimensions
Dec 17, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41495
MEDIUM
NumPy < 1.19.0 - Denial of Service via Missing Return-Value Validation in PyArray_DescrNew
Dec 17, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-34141
MEDIUM
NumPy < 1.22.0 - Incorrect String Comparison in numpy.core
Dec 17, 2021
CVSS 5.3
EPSS 0.02
CVE-2021-33430
MEDIUM
NumPy 1.9.0-1.9.2 - Denial of Service via Large Array Dimension Specification
Dec 17, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-43837
HIGH
vault-cli 0.7.0-3.0.0 - Remote Code Execution via Jinja2 Template Injection
Dec 16, 2021
CVSS 8.4
EPSS 0.05
CVE-2021-43831
HIGH
NUCLEI
gradio < 2.5.0 - Unauthenticated Path Traversal
Dec 15, 2021
CVSS 7.7
EPSS 0.04
CVE-2021-43818
HIGH
lxml < 4.6.5 - Cross-Site Scripting via HTML Cleaner Bypass
Dec 13, 2021
CVSS 8.2
EPSS 0.02
CVE-2021-41265
HIGH
Flask-AppBuilder <3.3.4 - Auth Bypass
Dec 09, 2021
CVSS 8.1
EPSS 0.01
CVE-2021-43811
HIGH
Sockeye < 2.3.24 - Remote Code Execution via Unsafe YAML Loading
Dec 08, 2021
CVSS 7.8
EPSS 0.02
CVE-2021-37941
HIGH
Elastic APM Java Agent 1.10.0-1.26.0 - Local Privilege Escalation via Attacher CLI or API
Dec 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-44420
HIGH
Django <2.2.25-<3.2.10 - Auth Bypass
Dec 08, 2021
CVSS 7.3
EPSS 0.02
CVE-2021-43781
MEDIUM
Invenio-Drafts-Resources <0.13.7, 0.14.6 - Privilege Escalation
Dec 06, 2021
CVSS 6.4
EPSS 0.01
CVE-2021-44227
HIGH
GNU Mailman < 2.1.38 - Cross-Site Request Forgery via Admin Request
Dec 02, 2021
CVSS 8.8
EPSS 0.01
CVE-2021-25967
MEDIUM
CKAN 2.9.0-2.9.3 - Stored Cross-Site Scripting via SVG Profile Picture Upload
Dec 01, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-3994
CRITICAL
django-helpdesk < 0.3.2 - Stored Cross-Site Scripting
Dec 01, 2021
CVSS 9.6
EPSS 0.01
CVE-2021-32061
MEDIUM
s3scanner < 2.0.2 - Path Traversal via Crafted Bucket Key
Nov 29, 2021
CVSS 5.3
EPSS 0.02
CVE-2021-23654
MEDIUM
html-to-csv - CSV Injection via Unvalidated Formula Embedding
Nov 26, 2021
CVSS 5.6
EPSS 0.01
CVE-2021-43775
HIGH
Aim < 3.1.0 - Path Traversal via File Reference Manipulation
Nov 23, 2021
CVSS 8.6
EPSS 0.02
CVE-2021-41281
HIGH
Synapse < 1.47.1 - Unauthenticated Path Traversal via Media Repository
Nov 23, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-25986
MEDIUM
django-wiki 0.0.20-0.7.8 - Stored Cross-Site Scripting in Notifications Section
Nov 23, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-40831
MEDIUM
AWS IoT Device SDK - Info Disclosure
Nov 23, 2021
CVSS 6.3
EPSS 0.01
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
pgadmin4 26
openbabel 24
litellm 23
Quick Filters