pypi

5,093 tracked vulnerabilities.

CVE-2020-11538 HIGH
Pillow < 7.0.0 - Out-of-bounds Read in SGI Image File Parser
Jun 25, 2020
CVSS 8.1
EPSS 0.03
CVE-2020-10994 MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read via Crafted JP2 File
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-10379 HIGH
Pillow < 7.1.0 - Buffer Overflow in libImaging/TiffDecode.c
Jun 25, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-10378 MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read in PCX Image Decoder
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-10177 MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read in FliDecode
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-4071 LOW
django-basic-auth-ip-whitelist <0.3.4 - Info Disclosure
Jun 24, 2020
CVSS 2.2
EPSS 0.00
CVE-2020-9480 CRITICAL NUCLEI
Apache Spark <= 2.4.5 - Unauthenticated Remote Code Execution via Standalone Resource Manager
Jun 23, 2020
CVSS 9.8
EPSS 0.27
CVE-2020-14942 CRITICAL
Tendenci < 12.0.11 - Deserialization of Untrusted Data in Helpdesk Staff Views
Jun 21, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-14019 HIGH
rtslib-fb < 2.1.72 - Incorrect Default Permissions in saveconfig.json
Jun 19, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-7932 MEDIUM
OMERO.web < 5.6.3 - Exposure of Sensitive Information via URL Query Parameters
Jun 17, 2020
CVSS 5.7
EPSS 0.01
CVE-2020-11090 HIGH
Indy Node 1.12.2 - Uncontrolled Resource Consumption via Malformed TAA Transaction
Jun 11, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-10755 MEDIUM
OpenStack Cinder <14.1.0-16.1.0 - Info Disclosure
Jun 10, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-13596 MEDIUM
Django 2.2-2.2.13 - Cross-Site Scripting via ForeignKeyRawIdWidget Query Parameters
Jun 03, 2020
CVSS 6.1
EPSS 0.03
CVE-2020-13254 MEDIUM
Django <2.2.13, <3.0.7 - Info Disclosure
Jun 03, 2020
CVSS 5.9
EPSS 0.06
CVE-2020-12607 HIGH
fastecdsa < 2.1.2 - Improper Verification of Cryptographic Signature
Jun 02, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-13757 HIGH
Python-RSA < 4.1 - Use of a Broken or Risky Cryptographic Algorithm
Jun 01, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-13388 CRITICAL
jw.util < 2.3 - OS Command Injection via YAML Configuration Loading
May 22, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7658 MEDIUM
meinheld < 1.0.2 - HTTP Request Smuggling via Incorrect Header Parsing
May 22, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-13258 MEDIUM NUCLEI
contentful/python_example < 2020-05-21 - Reflected Cross-Site Scripting via API Parameter
May 21, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-7655 MEDIUM
netius < 1.17.58 - HTTP Request Smuggling via Transfer-Encoding Header Parsing
May 21, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-11078 MEDIUM
httplib2 < 0.18.0 - HTTP Request Smuggling via CRLF Injection
May 20, 2020
CVSS 6.8
EPSS 0.03
CVE-2020-13092 CRITICAL
scikit-learn <0.23.0 - Command Injection
May 15, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-12889 CRITICAL
MISP MISP-maltego <1.4.4 - Info Disclosure
May 15, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-10744 MEDIUM
Ansible Engine <2.7.18-2.9.9 - Privilege Escalation
May 15, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-1746 MEDIUM
Ansible Engine <2.7.17, 2.8.x <2.8.11, 2.9.x <2.9.7 - Info Disclosure
May 12, 2020
CVSS 5.0
EPSS 0.00
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV