pypi
5,093 tracked vulnerabilities.
CVE-2020-25032
HIGH
Flask-Cors < 3.0.9 - Path Traversal via Non-Canonical Pathname
Aug 31, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-24715
CRITICAL
Scalyr Agent < 2.1.10 - Missing SSL Certificate Validation
Aug 27, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-24714
CRITICAL
Scalyr Agent < 2.1.10 - Missing SSL Certificate Validation via OpenSSL Binary
Aug 27, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-17376
HIGH
OpenStack Nova <19.3.1,20.x<20.3.1,21.0.0 - Privilege Escalation
Aug 26, 2020
CVSS 8.3
EPSS 0.02
CVE-2020-15147
HIGH
Red Discord Bot < 3.3.12 - Remote Code Execution via Streams Module Going Live Message
Aug 21, 2020
CVSS 8.5
EPSS 0.02
CVE-2020-15140
HIGH
Red Discord Bot < 3.3.11 - Remote Code Execution via Trivia Leaderboard Command
Aug 21, 2020
CVSS 8.2
EPSS 0.01
CVE-2020-15142
HIGH
openapi-python-client <0.5.3 - Code Injection
Aug 14, 2020
CVSS 8.0
EPSS 0.02
CVE-2020-15141
LOW
openapi-python-client <0.5.3 - Path Traversal
Aug 14, 2020
CVSS 3.0
EPSS 0.01
CVE-2020-17446
CRITICAL
asyncpg < 0.21.0 - Remote Code Execution via Crafted PostgreSQL Server Response
Aug 12, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-17495
HIGH
django-celery-results <1.2.1 - Info Disclosure
Aug 11, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-7698
HIGH
gerapy < 0.9.3 - OS Command Injection via project_configure Endpoint
Jul 29, 2020
CVSS 8.1
EPSS 0.02
CVE-2020-15120
MEDIUM
I hate money <4.1.5 - Privilege Escalation
Jul 27, 2020
CVSS 4.9
EPSS 0.01
CVE-2020-7695
MEDIUM
Uvicorn < 0.11.7 - HTTP Response Splitting via CRLF Injection in HTTP Headers
Jul 27, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7694
LOW
uvicorn < 0.11.7 - ANSI Escape Sequence Injection via Request Logger
Jul 27, 2020
CVSS 3.7
EPSS 0.01
CVE-2020-15904
HIGH
bsdiff4 < 1.2.0 - Out-of-bounds Write via Crafted Patch File
Jul 22, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-15118
MEDIUM
Wagtail <2.7.4, 2.9.3 - Info Disclosure
Jul 20, 2020
CVSS 5.7
EPSS 0.01
CVE-2020-15110
MEDIUM
jupyterhub-kubespawner <0.12 - Privilege Escalation
Jul 17, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-9485
MEDIUM
Apache Airflow < 1.10.10 - Stored Cross-Site Scripting in Chart Pages
Jul 17, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-11983
MEDIUM
Apache Airflow < 1.10.10 - Authenticated Stored Cross-Site Scripting in RBAC UI
Jul 17, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-11982
CRITICAL
Apache Airflow < 1.10.10 - Remote Code Execution via CeleryExecutor Deserialization
Jul 17, 2020
CVSS 9.8
EPSS 0.07
CVE-2020-11981
CRITICAL
NUCLEI
Apache Airflow < 1.10.10 - OS Command Injection via CeleryExecutor
Jul 17, 2020
CVSS 9.8
EPSS 0.34
CVE-2020-11978
HIGH
KEVNUCLEI
Apache Airflow < 1.10.11 - Authenticated Remote Code Execution via Example DAG
Jul 17, 2020
CVSS 8.8
EPSS 0.99
CVE-2020-15101
LOW
freewvs < 0.1.1 - Denial of Service via Deep Directory Recursion
Jul 14, 2020
CVSS 2.8
EPSS 0.01
CVE-2020-15100
LOW
freewvs < 0.1.1 - Denial of Service via Large File Processing
Jul 14, 2020
CVSS 2.8
EPSS 0.00
CVE-2020-15105
MEDIUM
Django Two-Factor Authentication <1.12 - Info Disclosure
Jul 10, 2020
CVSS 5.4
EPSS 0.01
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
litellm 27
pgadmin4 26
openbabel 24
Quick Filters