pypi

5,089 tracked vulnerabilities.

CVE-2021-40830 MEDIUM
AWS IoT Device SDK v2 < 1.5.0/1.5.3/1.6.1/1.12.7 - Improper Certificate Validation
Nov 23, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-40829 MEDIUM
AWS IoT Device SDK v2 Certificate Validation Flaw on macOS
Nov 23, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-40828 MEDIUM
AWS IoT Device SDK v2 < 1.3.3/1.5.18/1.12.7/1.5.3 - Improper Certificate Validation on Windows
Nov 23, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-44144 CRITICAL
Croatia Control Asterix 2.8.1 - Heap-Based Buffer Over-Read
Nov 22, 2021
CVSS 9.1
EPSS 0.01
CVE-2021-3950 MEDIUM
django-helpdesk < 0.3.1 and < 0.3.2 - Cross-Site Scripting
Nov 19, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-42250 MEDIUM
Apache Superset < 1.3.2 - Authenticated Log Forgery via HTTP Endpoint
Nov 17, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-3945 MEDIUM
django-helpdesk < 0.3.1 - Stored Cross-Site Scripting
Nov 13, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-3840 HIGH
Lenovo Antilles < 1.0.1 - Remote Code Execution via Dependency Confusion
Nov 12, 2021
CVSS 8.8
EPSS 0.02
CVE-2021-41972 MEDIUM
Apache Superset <= 1.3.1 - Authenticated Database Connection Password Leak
Nov 12, 2021
CVSS 6.5
EPSS 0.01
CVE-2021-3572 MEDIUM
pip < 21.1 - Remote Revision Manipulation via Unicode Separator Handling
Nov 10, 2021
CVSS 5.7
EPSS 0.02
CVE-2021-43572 CRITICAL
Stark Bank Python ECDSA <2.0.1 - Code Injection
Nov 09, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-39182 HIGH
EnroCrypt < 1.1.4 - Use of Broken MD5 Hashing Algorithm
Nov 08, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-41228 HIGH
TensorFlow 2.4.0-2.4.3, 2.5.0-2.5.1 - OS Command Injection via saved_model_cli eval
Nov 05, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-41227 MEDIUM
TensorFlow <2.7.0 - Memory Corruption
Nov 05, 2021
CVSS 6.6
EPSS 0.00
CVE-2021-41225 MEDIUM
TensorFlow 2.4.0-2.4.3, 2.6.0 - Use of Uninitialized Variable in Grappler Optimizer
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41222 MEDIUM
TensorFlow 2.4.0-2.4.3, 2.6.0 - Denial of Service via Negative Size Splits in SplitV
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41221 HIGH
TensorFlow 2.4.0-2.4.3, 2.6.0 - Heap Buffer Overflow in Cudnn Operations Shape Inference
Nov 05, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-41220 HIGH
TensorFlow 2.6.0 - Use-After-Free in CollectiveReduceV2 Async Implementation
Nov 05, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-41216 MEDIUM
TensorFlow <2.7.0 - Buffer Overflow
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41213 MEDIUM
TensorFlow 2.4.0-2.4.3, 2.6.0 - Denial of Service via Mutually Recursive tf.function Deadlock
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41218 MEDIUM
TensorFlow 2.4.0-2.4.3, 2.6.0 - Divide By Zero in AllToAll Shape Inference
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41209 MEDIUM
TensorFlow 2.4.0-2.4.3, 2.6.0 - Denial of Service via Division by Zero in Convolution Operators
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41208 HIGH
TensorFlow 2.4.0-2.4.3, 2.6.0 - Denial of Service via Boosted Trees API
Nov 05, 2021
CVSS 8.8
EPSS 0.00
CVE-2021-41207 MEDIUM
TensorFlow 2.4.0-2.4.3, 2.6.0 - Divide By Zero in ParallelConcat
Nov 05, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-41206 HIGH
TensorFlow 2.4.0-2.4.3, 2.6.0 - Missing Tensor Shape Validation Leading to Memory Corruption
Nov 05, 2021
CVSS 7.0
EPSS 0.00
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 pgadmin4 26 openbabel 24 litellm 23
Quick Filters
Critical CVEs With Exploits In CISA KEV