pypi

5,093 tracked vulnerabilities.

CVE-2019-15753 CRITICAL
OpenStack os-vif 1.15.0-1.15.1 and 1.16.0 - Unauthenticated Ethernet Flooding via Hardcoded MAC Aging Time
Aug 28, 2019
CVSS 9.1
EPSS 0.03
CVE-2019-11457 HIGH
MicroPyramid Django CRM 0.2.1 - CSRF
Aug 27, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-10751 HIGH
httpie < 1.0.3 - Open Redirect and Arbitrary File Write via HTTP to Crafted URL
Aug 23, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-15486 MEDIUM
django-js-reverse < 0.9.1 - Cross-Site Scripting via js_reverse_inline
Aug 23, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-7617 HIGH
Elastic APM agent for Python <5.1.0 - Open Redirect
Aug 22, 2019
CVSS 7.2
EPSS 0.02
CVE-2019-14751 HIGH
nltk < 3.4.5 - Arbitrary File Write via Directory Traversal in Package Extraction
Aug 22, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-15149 CRITICAL
Mitogen < 0.2.8 - Unauthenticated Routing Protection Bypass via Child Initiation
Aug 18, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-14433 MEDIUM
OpenStack Nova <17.0.12-19.0.2 - Info Disclosure
Aug 09, 2019
CVSS 6.5
EPSS 0.02
CVE-2019-14806 HIGH
Pallets Werkzeug <0.15.3 - Info Disclosure
Aug 09, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-14234 CRITICAL
Django <1.11.23,2.1.11,2.2.4 - SQL Injection
Aug 09, 2019
CVSS 9.8
EPSS 0.48
CVE-2019-10099 HIGH
Apache Spark < 1.6.3 and 2.0.0-2.3.2 - Cleartext Storage of Sensitive Information
Aug 07, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-14235 HIGH
Django 1.11-1.11.22, 2.1-2.1.10, 2.2-2.2.3 - Denial of Service via Recursion in uri_to_iri
Aug 02, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-14233 HIGH
Django <1.11.23, <2.1.11, <2.2.4 - Info Disclosure
Aug 02, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-14232 HIGH
Django <1.11.23, 2.1.x <2.1.11, 2.2.x <2.2.4 - RCE
Aug 02, 2019
CVSS 7.5
EPSS 0.04
CVE-2019-14493 HIGH
OpenCV < 4.1.1 - NULL Pointer Dereference in XML Parser
Aug 01, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-14492 HIGH
OpenCV < 3.4.7 - Out-of-bounds Read in HaarEvaluator::OptFeature::calc
Aug 01, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-14491 HIGH
OpenCV < 3.4.7 - Out-of-bounds Read in HaarEvaluator
Aug 01, 2019
CVSS 8.2
EPSS 0.03
CVE-2019-10156 MEDIUM
Ansible <2.6.18, <2.7.12, <2.8.2 - Info Disclosure
Jul 30, 2019
CVSS 5.4
EPSS 0.02
CVE-2019-10141 HIGH
openstack-ironic-inspector <8.2.1 - SQL Injection
Jul 30, 2019
CVSS 8.3
EPSS 0.02
CVE-2019-10138 HIGH
python-novajoin <1.1.1 - Privilege Escalation
Jul 30, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-1020006 MEDIUM
invenio-app <1.1.1 - Host Header Injection
Jul 29, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-1020005 MEDIUM
invenio-communities <1.0.0a20 - XSS
Jul 29, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-1020003 MEDIUM
invenio-records < 1.2.2 - Cross-Site Scripting
Jul 29, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-1020019 MEDIUM
invenio-previewer < 1.0.0a12 - Cross-Site Scripting
Jul 29, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-14322 HIGH NUCLEI
Pallets Werkzeug <0.15.5 - Path Traversal
Jul 28, 2019
CVSS 7.5
EPSS 0.56