pypi

5,089 tracked vulnerabilities.

CVE-2021-25288 CRITICAL
Pillow < 8.2.0 - Out-of-bounds Read in J2kDecode
Jun 02, 2021
CVSS 9.1
EPSS 0.02
CVE-2021-25287 CRITICAL
Pillow < 8.2.0 - Out-of-bounds Read in J2kDecode
Jun 02, 2021
CVSS 9.1
EPSS 0.03
CVE-2021-28675 MEDIUM
Pillow < 8.2.0 - Denial of Service in PSDImagePlugin
Jun 02, 2021
CVSS 5.5
EPSS 0.01
CVE-2021-20267 HIGH
OpenStack Neutron < 16.3.3 - IPv6 Spoofing via Open vSwitch Firewall Rules
May 28, 2021
CVSS 7.1
EPSS 0.01
CVE-2021-20191 MEDIUM
Oracle Virtualization < 2.8.19 - Log Information Exposure
May 26, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-33038 HIGH
HyperKitty <1.3.4 - Info Disclosure
May 26, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-20178 MEDIUM
Ansible < 2.9.18 - Credential Disclosure in Bitbucket Pipeline Variable Module Logs
May 26, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-32629 HIGH
Cranelift x64 <0.73 - Sandbox Escape
May 24, 2021
CVSS 7.2
EPSS 0.00
CVE-2021-33513 MEDIUM
Plone < 5.2.4 - Cross-Site Scripting via Inline Diff Methods
May 21, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-33512 MEDIUM
Plone < 5.2.4 - Stored Cross-Site Scripting via SVG/HTML File Upload
May 21, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-33511 HIGH
Plone < 5.2.4 - Server-Side Request Forgery via lxml Parser
May 21, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-33510 MEDIUM
Plone < 5.2.4 - Authenticated Server-Side Request Forgery via Event iCal URL
May 21, 2021
CVSS 4.3
EPSS 0.01
CVE-2021-33509 CRITICAL
Plone < 5.2.4 - Authenticated Arbitrary File Write via ReStructuredText Transform
May 21, 2021
CVSS 9.9
EPSS 0.02
CVE-2021-33508 MEDIUM
Plone < 5.2.4 - Stored Cross-Site Scripting via User Full Name in Ownership Tab
May 21, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-33507 MEDIUM
Plone - Reflected Cross-Site Scripting
May 21, 2021
CVSS 6.1
EPSS 0.01
CVE-2021-32633 MEDIUM
Plone < 4.3.20 - Path Traversal
May 21, 2021
CVSS 6.8
EPSS 0.02
CVE-2021-3313 MEDIUM
Plone < 5.2.4 - Stored Cross-Site Scripting via User Fullname and File Upload
May 20, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-32618 LOW NUCLEI
Flask-Security-Too < 4.1.0 - Open Redirect via Next Parameter
May 17, 2021
CVSS 3.1
EPSS 0.03
CVE-2021-29619 LOW
TensorFlow < 2.1.4 - Denial of Service via Invalid Arguments to tf.raw_ops.SparseCountSparseOutput
May 14, 2021
CVSS 2.5
EPSS 0.00
CVE-2021-29618 LOW
TensorFlow < 2.1.4 - Denial of Service via tf.transpose with Complex Argument
May 14, 2021
CVSS 2.5
EPSS 0.00
CVE-2021-29617 LOW
TensorFlow < 2.1.4 - Denial of Service via Invalid Arguments in tf.strings.substr
May 14, 2021
CVSS 2.5
EPSS 0.00
CVE-2021-29616 LOW
TensorFlow < 2.1.4 - NULL Pointer Dereference in TrySimplify
May 14, 2021
CVSS 2.5
EPSS 0.00
CVE-2021-29615 LOW
TensorFlow <2.5.0 - Buffer Overflow
May 14, 2021
CVSS 2.5
EPSS 0.00
CVE-2021-29614 HIGH
TensorFlow < 2.1.4 - Memory Corruption via tf.io.decode_raw with fixed_length
May 14, 2021
CVSS 7.1
EPSS 0.00
CVE-2021-29613 MEDIUM
TensorFlow < 2.1.4 - Out-of-bounds Read in CTCLoss
May 14, 2021
CVSS 6.3
EPSS 0.00