pypi

5,089 tracked vulnerabilities.

CVE-2021-41104 HIGH
ESPHome < 2021.9.2 - Unauthenticated Over-the-Air Update via Web Server
Sep 28, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-3828 HIGH
nltk - Inefficient Regular Expression Complexity
Sep 27, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-31606 HIGH
openvpn-monitor <= 1.1.3 - Authorization Bypass to Disconnect Clients
Sep 27, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-31605 HIGH
openvpn-monitor <= 1.1.3 - OS Command Injection via OpenVPN Management Interface Socket
Sep 27, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-31604 MEDIUM
openvpn-monitor < 1.1.3 - Cross-Site Request Forgery
Sep 27, 2021
CVSS 6.5
EPSS 0.01
CVE-2021-3583 HIGH
Ansible Automation Platform - Code Injection via Template Injection
Sep 22, 2021
CVSS 7.1
EPSS 0.01
CVE-2021-39229 HIGH
Apprise < 0.9.5.1 - Denial of Service via IFTTT Plugin Regex
Sep 20, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-32838 HIGH
flask-restx < 0.5.1 - Regular Expression Denial of Service via Email Validation
Sep 20, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-32839 HIGH
sqlparse 0.4.0-0.4.1 - Denial of Service via SQL Comment Regex Backtracking
Sep 20, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-32297 HIGH
LIEF < 0.11.4 - Heap-Based Buffer Overflow in PE Reader
Sep 20, 2021
CVSS 8.8
EPSS 0.02
CVE-2021-39218 MEDIUM
Wasmtime 0.26.0-0.29.0 - Use-After-Free and Out-of-Bounds Read/Write via ExternRef GC Safepoint Handling
Sep 17, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-39219 MEDIUM
Wasmtime < 0.30.0 - Type Confusion via Cross-Engine Linker Usage
Sep 17, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-39216 MEDIUM
Wasmtime 0.19.0-0.29.0 - Use-After-Free via Externref Host-to-Guest Passing
Sep 17, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-39214 HIGH
mitmproxy < 7.0.2 - HTTP Request Smuggling via Malicious Client/Server
Sep 16, 2021
CVSS 8.1
EPSS 0.01
CVE-2021-39207 HIGH
ParlAI < 1.1.0 - Remote Code Execution via YAML Deserialization
Sep 10, 2021
CVSS 8.4
EPSS 0.02
CVE-2021-24040 CRITICAL
ParlAI < 1.1.0 - Remote Code Execution via Unsafe YAML Deserialization
Sep 10, 2021
CVSS 9.8
EPSS 0.17
CVE-2021-40347 MEDIUM
GNU Mailman Postorius <1.3.5 - Info Disclosure
Sep 10, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-40839 HIGH
rencode < 1.0.6 - Denial of Service via Malformed Typecode Decoding
Sep 10, 2021
CVSS 7.5
EPSS 0.06
CVE-2021-38540 CRITICAL NUCLEI
Airflow >=2.0.0-<2.1.3 - RCE/Info Disclosure
Sep 09, 2021
CVSS 9.8
EPSS 0.81
CVE-2021-40797 MEDIUM
OpenStack Neutron <16.4.1-18.1.1 - DoS
Sep 08, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-32805 HIGH
Flask-AppBuilder <3.2.2 - Open Redirect
Sep 08, 2021
CVSS 7.2
EPSS 0.01
CVE-2021-22004 MEDIUM
SaltStack Salt < 3003.3 - Race Condition via Minion Config File
Sep 08, 2021
CVSS 6.4
EPSS 0.00
CVE-2021-21996 HIGH
SaltStack Salt <3003.3 - Privilege Escalation
Sep 08, 2021
CVSS 7.5
EPSS 0.04
CVE-2021-23404 HIGH
sqlite-web - Cross-Site Request Forgery in SQL Dashboard
Sep 08, 2021
CVSS 7.6
EPSS 0.00
CVE-2021-23437 HIGH
Pillow 5.2.0-8.3.1 - Regular Expression Denial of Service via getrgb Function
Sep 03, 2021
CVSS 7.5
EPSS 0.03
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 pgadmin4 26 openbabel 24 litellm 23
Quick Filters
Critical CVEs With Exploits In CISA KEV