pypi

5,093 tracked vulnerabilities.

CVE-2020-28468 HIGH
pwntools < 4.3.1 - Server-Side Template Injection in Shellcraft Generator
Jan 08, 2021
CVSS 8.1
EPSS 0.04
CVE-2020-26759 CRITICAL
clickhouse-driver <0.1.5 - Buffer Overflow
Jan 06, 2021
CVSS 9.8
EPSS 0.03
CVE-2020-28736 HIGH
Plone < 5.2.3 - Authenticated XML External Entity Injection via Schema Editor
Dec 30, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-28735 HIGH
Plone < 5.2.3 - Authenticated Server-Side Request Forgery via Tracebacks Feature
Dec 30, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-28734 HIGH
Plone < 5.2.3 - Authenticated XML External Entity Injection
Dec 30, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-35678 MEDIUM
Autobahn < 20.12.3 - Open Redirect via Redirect Header Injection
Dec 27, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-11093 HIGH
Hyperledger Indy <1.12.4 - Privilege Escalation
Dec 24, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-26275 MEDIUM
Jupyter Server <1.1.1 - Open Redirect
Dec 21, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-26263 HIGH
tlslite-ng <0.7.6, 0.8.0-alpha39 - Info Disclosure
Dec 21, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-17526 HIGH NUCLEI
Apache Airflow Webserver <1.10.14 - Info Disclosure
Dec 21, 2020
CVSS 7.7
EPSS 0.23
CVE-2020-22083 CRITICAL
jsonpickle < 1.4.1 - Remote Code Execution via Untrusted Data Deserialization
Dec 17, 2020
CVSS 9.8
EPSS 0.06
CVE-2020-17513 MEDIUM
Apache Airflow < 1.10.13 - Server-Side Request Forgery via Charts and Query View
Dec 14, 2020
CVSS 5.3
EPSS 0.04
CVE-2020-17511 MEDIUM
Apache Airflow < 1.10.13 - Cleartext Storage of Sensitive Information in Log Table
Dec 14, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-17515 MEDIUM
Apache Airflow < 1.10.15 - Cross-Site Scripting via Origin Parameter
Dec 11, 2020
CVSS 6.1
EPSS 0.16
CVE-2020-26270 MEDIUM
TensorFlow <1.15.5, <2.0.4, <2.1.3, <2.2.2, <2.3.2, <2.4.0 - DoS
Dec 10, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-26269 HIGH
TensorFlow <2.4.0rc* - Buffer Overflow
Dec 10, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-26268 MEDIUM
TensorFlow < 1.15.5 - Denial of Service via ImmutableConst Memory Mapping
Dec 10, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-26267 MEDIUM
TensorFlow <1.15.5, <2.0.4, <2.1.3, <2.2.2, <2.3.2, <2.4.0 - Memory...
Dec 10, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-26266 MEDIUM
TensorFlow <1.15.5-<2.4.0 - Info Disclosure
Dec 10, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-26271 MEDIUM
TensorFlow < 1.15.5 - Out-of-bounds Read in MakeEdge Function
Dec 10, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-26257 MEDIUM
Matrix Synapse < 1.23.1 - Denial of Service via Malformed Federation Event Injection
Dec 09, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-26261 HIGH
jupyterhub-systemdspawner < 0.15 - Unauthenticated User API Token Exposure via Systemd Environment
Dec 09, 2020
CVSS 7.9
EPSS 0.00
CVE-2020-29651 HIGH
Python <1.9.0 - DoS
Dec 09, 2020
CVSS 7.5
EPSS 0.05
CVE-2020-26249 HIGH
Red Discord Bot Dashboard <0.1.7a - Code Injection via Crafted Discord Names
Dec 09, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-25449 MEDIUM
Arachnys Cabot 0.11.12 - Cross-Site Scripting via Address Column
Dec 04, 2020
CVSS 4.8
EPSS 0.01
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV