pypi

5,093 tracked vulnerabilities.

CVE-2020-18705 CRITICAL
Quokka v0.4.0 - XML External Entity Injection in Content Views
Aug 16, 2021
CVSS 9.8
EPSS 0.03
CVE-2020-18704 CRITICAL
Django-Widgy < 0.9.0 - Unauthenticated Arbitrary File Upload via Image Widget
Aug 16, 2021
CVSS 9.8
EPSS 0.03
CVE-2020-18703 CRITICAL
Quokka v0.4.0 - XML External Entity Injection in quokka/utils/atom.py
Aug 16, 2021
CVSS 9.8
EPSS 0.03
CVE-2020-18702 MEDIUM
Quokka v0.4.0 - Cross-Site Scripting via Username Parameter in Admin Actions
Aug 16, 2021
CVSS 6.1
EPSS 0.01
CVE-2020-18699 MEDIUM
Lin-CMS-Flask 0.1.1 - Stored Cross-Site Scripting via Username Parameter
Aug 16, 2021
CVSS 6.1
EPSS 0.01
CVE-2020-18698 CRITICAL
Lin-CMS-Flask 0.1.1 - Unauthenticated Brute Force Attack via Login Function
Aug 16, 2021
CVSS 9.8
EPSS 0.02
CVE-2020-10729 MEDIUM
Ansible Engine < 2.9.6 - Use of Insufficiently Random Values in Password Lookup
May 27, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-15225 HIGH
django-filter < 2.4.0 - Denial of Service via NumberFilter Exponential Input
Apr 29, 2021
CVSS 7.5
EPSS 0.02
CVE-2020-35662 HIGH
SaltStack Salt < 2015.8.10 - Improper Certificate Validation
Feb 27, 2021
CVSS 7.4
EPSS 0.03
CVE-2020-28972 MEDIUM
SaltStack Salt < 3002.5 - Improper Certificate Validation in VMware Authentication
Feb 27, 2021
CVSS 5.9
EPSS 0.03
CVE-2020-28243 HIGH
SaltStack Salt < 3002.5 - Command Injection via Crafted Process Name
Feb 27, 2021
CVSS 7.8
EPSS 0.04
CVE-2020-35681 HIGH
Django Channels 3.0.0-3.0.2 - Information Disclosure via AsgiHandler Request Scope Mismatch
Feb 22, 2021
CVSS 7.4
EPSS 0.03
CVE-2020-28463 MEDIUM
reportlab < 3.5.55 - Server-Side Request Forgery via IMG Tag
Feb 18, 2021
CVSS 6.5
EPSS 0.01
CVE-2020-36245 HIGH
GramAddict < 1.2.3 - Unauthenticated Remote Code Execution via UIAutomator2 and ATX-Agent
Feb 17, 2021
CVSS 8.8
EPSS 0.02
CVE-2020-25340 MEDIUM
nfstream 5.2.0 - Denial of Service via Memory Leak
Feb 16, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-14343 CRITICAL
PyYAML < 5.4 - Remote Code Execution via Python Object Constructor
Feb 09, 2021
CVSS 9.8
EPSS 0.06
CVE-2020-36242 CRITICAL
cryptography < 3.3.2 - Integer Overflow and Buffer Overflow via Symmetric Encryption Update Calls
Feb 07, 2021
CVSS 9.1
EPSS 0.07
CVE-2020-28493 MEDIUM
Jinja2 < 2.11.3 - Uncontrolled Resource Consumption via _punctuation_re Regex
Feb 01, 2021
CVSS 5.3
EPSS 0.04
CVE-2020-28473 MEDIUM
bottle < 0.12.19 - Web Cache Poisoning via Parameter Cloaking
Jan 18, 2021
CVSS 6.8
EPSS 0.02
CVE-2020-36191 MEDIUM
JupyterHub 1.1.0 - Cross-Site Request Forgery via Missing _xsrf Field
Jan 13, 2021
CVSS 4.5
EPSS 0.00
CVE-2020-35459 HIGH
crmsh < 4.2.1 - Authenticated OS Command Injection via crm history Command
Jan 12, 2021
CVSS 7.8
EPSS 0.01
CVE-2020-35655 MEDIUM
Pillow 4.3.0-8.0.0 - Out-of-bounds Read in SGIRleDecode
Jan 12, 2021
CVSS 5.4
EPSS 0.02
CVE-2020-35654 HIGH
Pillow < 8.1.0 - Heap-Based Buffer Overflow in TiffDecode
Jan 12, 2021
CVSS 8.8
EPSS 0.02
CVE-2020-35653 HIGH
Pillow < 8.1.0 - Out-of-bounds Read in PCX Decoder
Jan 12, 2021
CVSS 7.1
EPSS 0.01
CVE-2020-25659 MEDIUM
python-cryptography <3.2 - Timing Attack
Jan 11, 2021
CVSS 5.9
EPSS 0.02
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV