pypi
5,089 tracked vulnerabilities.
CVE-2021-21371
MEDIUM
tenable-jira-cloud < 1.1.21 - Remote Code Execution via YAML Deserialization
Mar 10, 2021
CVSS 5.0
EPSS 0.00
CVE-2021-21360
MEDIUM
Products.GenericSetup < 2.1.1 - Unauthenticated Exposure of Sensitive Information via Log and Snapshot Files
Mar 09, 2021
CVSS 5.3
EPSS 0.02
CVE-2021-21337
MEDIUM
Products.PluggableAuthService < 2.6.1 - Open Redirect via Login Form
Mar 08, 2021
CVSS 5.7
EPSS 0.08
CVE-2021-21336
MEDIUM
Products.PluggableAuthService < 2.6.0 - Unauthenticated Role Information Disclosure via ZODB Role Manager Plugin
Mar 08, 2021
CVSS 6.5
EPSS 0.02
CVE-2021-27907
MEDIUM
Apache Superset <=0.38.0 - Stored XSS
Mar 05, 2021
CVSS 5.4
EPSS 0.86
CVE-2021-26813
HIGH
markdown2 >=1.0.1.18 <2.4.0 - Denial of Service via Inefficient Regular Expression
Mar 03, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-25315
CRITICAL
SUSE Linux Enterprise Server 15 SP 3 - Auth Bypass
Mar 03, 2021
CVSS 9.8
EPSS 0.02
CVE-2021-27923
HIGH
Pillow < 8.1.2 - Denial of Service via ICO Image Size Mismatch
Mar 03, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-27922
HIGH
Pillow < 8.1.2 - Denial of Service via ICNS Container Memory Allocation
Mar 03, 2021
CVSS 7.5
EPSS 0.05
CVE-2021-27921
HIGH
Pillow < 8.1.2 - Denial of Service via BLP Image Size Mismatch
Mar 03, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-3197
CRITICAL
Salt < 2015.8.10 - Injection
Feb 27, 2021
CVSS 9.8
EPSS 0.72
CVE-2021-3148
CRITICAL
SaltStack Salt < 3002.5 - Command Injection via Thin Generation
Feb 27, 2021
CVSS 9.8
EPSS 0.08
CVE-2021-3144
CRITICAL
SaltStack Salt < 2015.8.10 - Insufficient Session Expiration
Feb 27, 2021
CVSS 9.1
EPSS 0.05
CVE-2021-25284
MEDIUM
SaltStack Salt <3002.5 - Info Disclosure
Feb 27, 2021
CVSS 4.4
EPSS 0.01
CVE-2021-25283
CRITICAL
SaltStack Salt <3002.5 - Code Injection
Feb 27, 2021
CVSS 9.8
EPSS 0.10
CVE-2021-25282
CRITICAL
SaltStack Salt <3002.5 - Path Traversal
Feb 27, 2021
CVSS 9.1
EPSS 0.92
CVE-2021-25281
CRITICAL
NUCLEI
SaltStack Salt < 3002.5 - Unauthenticated Remote Command Execution via wheel_async Client
Feb 27, 2021
CVSS 9.8
EPSS 0.73
CVE-2021-21274
MEDIUM
Synapse 0.99.0-1.24.9 - Denial of Service via .well-known File Redirection
Feb 26, 2021
CVSS 4.3
EPSS 0.02
CVE-2021-21273
LOW
Synapse < 1.25.0 - Server-Side Request Forgery via Third-Party Invite Events and Push Notifications
Feb 26, 2021
CVSS 3.1
EPSS 0.02
CVE-2021-21330
LOW
aiohttp < 3.7.4 - Open Redirect via normalize_path_middleware
Feb 26, 2021
CVSS 3.1
EPSS 0.02
CVE-2021-26697
MEDIUM
Apache Airflow 2.0.0 - Unauthenticated Improper Privilege Management via Experimental API Lineage Endpoint
Feb 17, 2021
CVSS 5.3
EPSS 0.05
CVE-2021-26559
MEDIUM
Apache Airflow 2.0.0 - Improper Access Control in Configurations Endpoint
Feb 17, 2021
CVSS 6.5
EPSS 0.03
CVE-2021-23338
MEDIUM
qlib < 0.7.0 - Remote Code Execution via Unsafe YAML Deserialization
Feb 15, 2021
CVSS 6.6
EPSS 0.04
CVE-2021-21240
HIGH
httplib2 < 0.19.0 - Denial of Service via Malicious WWW-Authenticate Header
Feb 08, 2021
CVSS 7.5
EPSS 0.04
CVE-2021-26722
MEDIUM
LinkedIn Oncall < 1.4.0 - Reflected Cross-Site Scripting via Search Bar
Feb 05, 2021
CVSS 6.1
EPSS 0.03
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
pgadmin4 26
openbabel 24
litellm 23
Quick Filters