pypi

5,093 tracked vulnerabilities.

CVE-2020-29565 MEDIUM
OpenStack Horizon <18.5 - Open Redirect
Dec 04, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-27348 MEDIUM
snapcraft <4.4.4, <2.43.1+16.04.1, <2.43.1+18.04.1 - RCE
Dec 04, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-27783 MEDIUM
lxml < 4.6.2 - Cross-Site Scripting via Clean Module Parser
Dec 03, 2020
CVSS 6.1
EPSS 0.04
CVE-2020-26244 MEDIUM
Python oic <1.2.1 - Info Disclosure
Dec 02, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-29456 MEDIUM
Papermerge < 1.5.2 - Stored Cross-Site Scripting via Rename, Tag, Upload, or Create Folder Function
Dec 02, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-26250 MEDIUM
OAuthenticator <0.12.2 - Info Disclosure
Dec 01, 2020
CVSS 6.3
EPSS 0.01
CVE-2020-29367 HIGH
Blosc C-Blosc2 <2.0.0.beta.5 - Buffer Overflow
Nov 27, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-29128 CRITICAL
petl < 1.6.8 - XML External Entity Injection
Nov 26, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-26243 HIGH
Nanopb <0.4.4 & <0.3.9.7 - Memory Corruption
Nov 25, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-26232 MEDIUM
Jupyter Server < 1.0.6 - Open Redirect via Maliciously Crafted Link
Nov 24, 2020
CVSS 4.1
EPSS 0.01
CVE-2020-26890 HIGH
Matrix Synapse < 1.20.0 - Denial of Service via Malformed m.room.member Event JSON Values
Nov 24, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-28975 HIGH
scikit-learn 0.23.2-<1.0.1 - Denial of Service via Crafted SVM Model
Nov 21, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-26215 MEDIUM
Jupyter Notebook < 6.1.5 - Open Redirect via Maliciously Crafted Link
Nov 18, 2020
CVSS 4.4
EPSS 0.01
CVE-2020-28724 MEDIUM
Werkzeug < 0.11.6 - Open Redirect via Double Slash in URL
Nov 18, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-8897 MEDIUM
AWS Encryption SDK <2.0.0 - Info Disclosure
Nov 16, 2020
CVSS 4.8
EPSS 0.00
CVE-2020-25658 HIGH
python-rsa 2.1-4.6 - Bleichenbacher Timing Attack via RSA Decryption API
Nov 12, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-15275 HIGH
MoinMoin < 1.9.11 - Stored Cross-Site Scripting via SVG File Upload
Nov 11, 2020
CVSS 8.7
EPSS 0.02
CVE-2020-25074 CRITICAL
MoinMoin < 1.9.10 - Path Traversal and Remote Code Execution via Cache Action
Nov 10, 2020
CVSS 9.8
EPSS 0.06
CVE-2020-13927 CRITICAL KEVNUCLEI
Apache Airflow < 1.10.11 - Unauthenticated Remote Code Execution via Experimental API
Nov 10, 2020
CVSS 9.8
EPSS 1.00
CVE-2020-28364 MEDIUM
Locust < 1.3.2 - Stored Cross-Site Scripting in Web UI
Nov 09, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-26214 CRITICAL NUCLEI
Alerta < 7.5.7 and 8.0.0-8.1.0 - Authentication Bypass via Empty LDAP Password
Nov 06, 2020
CVSS 9.1
EPSS 0.66
CVE-2020-27589 HIGH
Synopsys hub-rest-api-python <0.0.53 - Info Disclosure
Nov 06, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-25592 CRITICAL
SaltStack Salt - Improper Authentication Bypass via eauth Credential Validation
Nov 06, 2020
CVSS 9.8
EPSS 0.57
CVE-2020-17490 MEDIUM
SaltStack Salt <3002 - Info Disclosure
Nov 06, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-16846 CRITICAL KEVNUCLEI
SaltStack Salt REST API Arbitrary Command Execution
Nov 06, 2020
CVSS 9.8
EPSS 1.00
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV