pypi

5,093 tracked vulnerabilities.

CVE-2020-10685 MEDIUM
Ansible Engine <2.7.17-2.8.11-2.9.7 - Info Disclosure
May 11, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-11054 LOW
qutebrowser <1.11.1 - Info Disclosure
May 07, 2020
CVSS 3.5
EPSS 0.01
CVE-2020-12692 MEDIUM
OpenStack Keystone <15.0.1-16.0.0 - Info Disclosure
May 07, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-12691 HIGH
OpenStack Keystone <16.0.0 - Privilege Escalation
May 07, 2020
CVSS 8.8
EPSS 0.05
CVE-2020-12690 HIGH
OpenStack Keystone <16.0.0 - Privilege Escalation
May 07, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-12689 HIGH
OpenStack Keystone <16.0.0 - Privilege Escalation
May 07, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-11037 MEDIUM
Wagtail <2.7.3-2.8.2 - Info Disclosure
Apr 30, 2020
CVSS 6.1
EPSS 0.00
CVE-2020-11652 MEDIUM KEV
SaltStack Salt < 2019.2.4 - Authenticated Path Traversal via ClearFuncs Methods
Apr 30, 2020
CVSS 6.5
EPSS 0.86
CVE-2020-11651 CRITICAL KEV
SaltStack Salt <2019.2.4,3000.2 - RCE
Apr 30, 2020
CVSS 9.8
EPSS 0.96
CVE-2020-10691 MEDIUM
Ansible-engine <2.9.7 - Path Traversal
Apr 30, 2020
CVSS 5.2
EPSS 0.00
CVE-2020-11010 MEDIUM
Tortoise ORM <0.15.23-0.16.6 - SQL Injection
Apr 20, 2020
CVSS 6.3
EPSS 0.01
CVE-2020-11888 MEDIUM
python-markdown2 < 2.3.8 - Cross-Site Scripting via Mishandled Element Names
Apr 20, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-11001 MEDIUM
Wagtail 1.9-2.7.1 - Stored Cross-Site Scripting in Page Revision Comparison View
Apr 14, 2020
CVSS 5.8
EPSS 0.01
CVE-2020-6816 MEDIUM
Mozilla Bleach < 3.1.2 - Cross-Site Scripting via RCDATA with SVG or Math Tags
Mar 24, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-6802 MEDIUM
Mozilla Bleach < 3.1.1 - Cross-Site Scripting via Mutation with Raw Tag
Mar 24, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-1747 CRITICAL
PyYAML < 5.3.1 - Remote Code Execution via python/object/new Constructor
Mar 24, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-10684 HIGH
Ansible Engine <2.7.17, 2.8.9, 2.9.6 - Privilege Escalation/Code In...
Mar 24, 2020
CVSS 7.9
EPSS 0.00
CVE-2020-5252 MEDIUM
safety < 1.8.6 and < 1.9.0 - Reliance on Untrusted Inputs in Security Decision
Mar 23, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-10799 CRITICAL
svglib < 0.9.3 - XML External Entity Injection via svg2rlg
Mar 20, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-5262 HIGH
EasyBuild < 4.1.2 - Sensitive Information Exposure via Debug Log Files
Mar 19, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-1740 LOW
Ansible < 2.7.17 - Insecure Temporary File Handling in Vault Edit
Mar 16, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-1738 LOW
Ansible Engine - Code Injection
Mar 16, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-1736 LOW
Ansible < 2.7.16 - Incorrect Permission Assignment via Atomic Move Primitive
Mar 16, 2020
CVSS 2.2
EPSS 0.00
CVE-2020-1735 MEDIUM
Ansible < 2.7.17 - Path Traversal via Fetch Module
Mar 16, 2020
CVSS 4.2
EPSS 0.00
CVE-2020-1753 MEDIUM
Ansible Engine <2.7.17, <2.8.11, <2.9.7 - Info Disclosure
Mar 16, 2020
CVSS 5.0
EPSS 0.01