pypi

5,093 tracked vulnerabilities.

CVE-2020-10594 CRITICAL
drf-jwt <1.15.1 - Auth Bypass
Mar 15, 2020
CVSS 9.1
EPSS 0.01
CVE-2020-10571 CRITICAL
psd-tools < 1.9.4 - Denial of Service via RLE Decoding
Mar 14, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-5240 HIGH
wagtail-2fa < 1.4.1 - Improper Authorization via 2FA Device Management Path
Mar 13, 2020
CVSS 7.6
EPSS 0.01
CVE-2020-1739 LOW
Ansible <2.7.16, <2.8.8, <2.9.5 - Info Disclosure
Mar 12, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-9543 HIGH
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 - Unauthorized Resource Access via UUID Lookup
Mar 12, 2020
CVSS 8.3
EPSS 0.01
CVE-2020-10109 CRITICAL
Twisted Web < 19.10.0 - HTTP Request Smuggling via Content-Length and Chunked Encoding
Mar 12, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-10108 CRITICAL
Twisted Web < 19.10.0 - HTTP Request Smuggling via Dual Content-Length Headers
Mar 12, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-1733 MEDIUM
Ansible Engine <2.7.17, <2.8.9, <2.9.6 - Privilege Escalation
Mar 11, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-1737 HIGH
Ansible < 2.7.17, 2.8.0a1-2.8.9 - Path Traversal via win_unzip Module
Mar 09, 2020
CVSS 7.5
EPSS 0.00
CVE-2020-7212 HIGH
urllib3 1.25.2-1.25.7 - Denial of Service via Inefficient Percent-Encoding Algorithm
Mar 06, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-9402 HIGH NUCLEI
Django 1.11-1.11.28, 2.2-2.2.10, 3.0-3.0.3 - SQL Injection via GIS Tolerance Parameter
Mar 05, 2020
CVSS 8.8
EPSS 0.23
CVE-2020-1734 HIGH
Ansible Engine < 2.7.16 and Ansible Tower < 3.3.4 - OS Command Injection via Pipe Lookup Plugin
Mar 03, 2020
CVSS 7.4
EPSS 0.00
CVE-2020-6174 CRITICAL
The Update Framework < 0.12.1 - Improper Verification of Cryptographic Signature
Feb 05, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-5236 MEDIUM
Waitress 1.4.2 - Denial of Service via Invalid Header Character Processing
Feb 04, 2020
CVSS 5.7
EPSS 0.03
CVE-2020-7471 CRITICAL
Django 1.11-1.11.27, 2.2-2.2.9, 3.0-3.0.2 - SQL Injection via StringAgg Delimiter
Feb 03, 2020
CVSS 9.8
EPSS 0.65
CVE-2020-7965 HIGH
webargs 5.0.0-5.5.2 - Cross-Site Request Forgery via JSON Content-Type Bypass
Jan 29, 2020
CVSS 8.8
EPSS 0.00
CVE-2020-5227 MEDIUM
feedgen < 0.9.0 - XML Denial of Service via Entity Expansion
Jan 28, 2020
CVSS 4.4
EPSS 0.02
CVE-2020-5215 MEDIUM
TensorFlow < 1.15.2 - Denial of Service via String to tf.float16 Conversion
Jan 28, 2020
CVSS 5.0
EPSS 0.01
CVE-2020-1932 MEDIUM
Apache Superset 0.34.0-0.35.1 - Authenticated Information Disclosure via Undocumented API Endpoint
Jan 28, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-7964 MEDIUM
Mirumee Saleor <2.9.1 - Info Disclosure
Jan 24, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-5224 MEDIUM
django-user-sessions < 1.7.1 - Session Takeover via Exposed Session Key
Jan 24, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-7941 CRITICAL
Plone <5.2.1 - Privilege Escalation
Jan 23, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7940 HIGH
Plone 4.3-5.2.0 - Weak Password Requirements
Jan 23, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-7939 HIGH
Plone 4.0-5.2.1 - SQL Injection in DTML or Connection Objects
Jan 23, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-7938 HIGH
Plone <5.2.1 - Privilege Escalation
Jan 23, 2020
CVSS 8.8
EPSS 0.01
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV