pypi

5,093 tracked vulnerabilities.

CVE-2020-15703 MEDIUM
aptdaemon - Unauthenticated Path Traversal via Locale Property
Oct 31, 2020
CVSS 4.0
EPSS 0.00
CVE-2020-15278 HIGH
Red Discord Bot <3.4.1 - Privilege Escalation
Oct 28, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-15271 CRITICAL
lookatme < 2.3.0 - OS Command Injection via Markdown Rendering
Oct 26, 2020
CVSS 9.3
EPSS 0.02
CVE-2020-15266 LOW
Tensorflow <2.4.0 - Memory Corruption
Oct 21, 2020
CVSS 3.7
EPSS 0.01
CVE-2020-15265 MEDIUM
Tensorflow <2.4.0 - Memory Corruption
Oct 21, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-26891 MEDIUM
Matrix Synapse < 1.21.0 - Cross-Site Scripting via Session Parameter in AuthRestServlet
Oct 19, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-27197 CRITICAL
libtaxii < 1.1.117 and OpenTAXII < 0.2.0 - Server-Side Request Forgery via Parse Method
Oct 17, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-26943 CRITICAL
OpenStack blazar-dashboard < 1.3.1 - Remote Code Execution via Python eval Function
Oct 16, 2020
CVSS 9.9
EPSS 0.03
CVE-2020-15251 HIGH
Sopel <1.0.3 - Privilege Escalation
Oct 13, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-15239 LOW
xmpp-http-upload <0.4.0 - Info Disclosure
Oct 06, 2020
CVSS 3.5
EPSS 0.01
CVE-2020-25635 MEDIUM
Ansible < 2.10.1 - Sensitive Information Exposure via AWS SSM Connection Plugin
Oct 05, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-13952 HIGH
Apache Superset < 0.37.2 - Authenticated Information Disclosure and Security Bypass
Sep 30, 2020
CVSS 8.1
EPSS 0.02
CVE-2020-25626 MEDIUM
Django REST Framework < 3.12.0 and < 3.11.2 - Cross-Site Scripting in Browseable API Viewer
Sep 30, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-26137 MEDIUM
urllib3 < 1.25.9 - CRLF Injection via HTTP Request Method
Sep 30, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-15214 HIGH
TensorFlow Lite <2.2.1-2.3.1 - Memory Corruption
Sep 25, 2020
CVSS 8.1
EPSS 0.01
CVE-2020-15213 MEDIUM
TensorFlow Lite 2.2.0 - Denial of Service via Segment Sum Memory Allocation
Sep 25, 2020
CVSS 4.0
EPSS 0.01
CVE-2020-15212 HIGH
TensorFlow Lite <2.2.1, 2.3.1 - Memory Corruption
Sep 25, 2020
CVSS 8.1
EPSS 0.01
CVE-2020-15211 MEDIUM
TensorFlow Lite <2.3.1 - Info Disclosure
Sep 25, 2020
CVSS 4.8
EPSS 0.01
CVE-2020-15210 MEDIUM
TensorFlow-Lite <2.3.1 - Memory Corruption
Sep 25, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-15209 MEDIUM
TensorFlow-Lite <2.3.1 - Code Injection
Sep 25, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-15208 HIGH
TensorFlow-Lite <2.3.1 - Memory Corruption
Sep 25, 2020
CVSS 7.4
EPSS 0.01
CVE-2020-15207 HIGH
TensorFlow-Lite <2.3.1 - Memory Corruption
Sep 25, 2020
CVSS 8.7
EPSS 0.01
CVE-2020-15206 CRITICAL
Tensorflow <1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1 - Use After Free
Sep 25, 2020
CVSS 9.0
EPSS 0.01
CVE-2020-15205 CRITICAL
Tensorflow <2.3.1 - Memory Corruption
Sep 25, 2020
CVSS 9.0
EPSS 0.01
CVE-2020-15204 MEDIUM
TensorFlow <1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1 - Use After Free
Sep 25, 2020
CVSS 5.3
EPSS 0.01
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV