pypi

5,093 tracked vulnerabilities.

CVE-2019-1010142 HIGH
scapy 2.4.0 - Denial of Service via RADIUS Attribute Packet List Field
Jul 19, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-1010268 CRITICAL
Ladon 0.6.1-0.9.39 - XML External Entity Injection in SOAP Request Handlers
Jul 18, 2019
CVSS 9.8
EPSS 0.06
CVE-2019-1010259 CRITICAL
SaltStack Salt <2019.2 - SQL Injection
Jul 18, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-1010083 HIGH
Flask < 1.0 - Denial of Service via Crafted JSON Data
Jul 17, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-13611 HIGH
python-engineio < 3.8.2 - Cross-Site WebSocket Hijacking via Origin Header
Jul 16, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-1010017 HIGH
libnmap < 0.6.3 - Denial of Service via XML Injection
Jul 15, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-13594 HIGH
Mirumee Saleor 2.7.0 - Cross-Site Request Forgery via Missing CSRF Token Validation
Jul 14, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-13177 CRITICAL
django-rest-registration < 0.5.0 - Improper Verification of Cryptographic Signature via Django Signing API Misuse
Jul 02, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-12781 MEDIUM
Django 1.11-1.11.21, 2.1-2.1.9, 2.2-2.2.2 - Cleartext Transmission of Sensitive Information
Jul 01, 2019
CVSS 5.3
EPSS 0.02
CVE-2019-12887 HIGH
KeyIdentity LinOTP <2.10.5.3 - Info Disclosure
Jun 27, 2019
CVSS 8.1
EPSS 0.01
CVE-2019-12855 HIGH
Twisted < 19.2.1 - Improper Certificate Validation in XMPP TLS Connections
Jun 16, 2019
CVSS 7.4
EPSS 0.02
CVE-2019-12387 MEDIUM
Twisted < 19.2.1 - HTTP Request Smuggling via CRLF Injection
Jun 10, 2019
CVSS 6.1
EPSS 0.03
CVE-2019-12761 HIGH
PyXDG < 0.26 - Code Injection via Menu XML Category Element
Jun 06, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-12760 LOW
parso < 0.4.0 - Remote Code Execution via Pickle Deserialization
Jun 06, 2019
CVSS 3.3
EPSS 0.02
CVE-2019-3895 HIGH
OpenStack Octavia < 0.9.0 - Unauthenticated Arbitrary Image Execution via Amphorae Spawning
Jun 03, 2019
CVSS 8.0
EPSS 0.01
CVE-2019-12308 MEDIUM
Django 1.11-1.11.20, 2.1-2.1.8, 2.2-2.2.1 - Stored Cross-Site Scripting in AdminURLFieldWidget
Jun 03, 2019
CVSS 6.1
EPSS 0.03
CVE-2019-10047 MEDIUM
Pydio < 8.2.2 - Authenticated Stored Cross-Site Scripting via File Upload and Preview
May 31, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-12300 CRITICAL
Buildbot <1.8.2, <2.3.1 - Auth Bypass
May 23, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-11842 HIGH
Matrix Sydent <1.0.3 & Synapse <0.99.3.1 - Info Disclosure
May 09, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-9635 MEDIUM
Google TensorFlow < 1.12.2 - Denial of Service via Invalid GIF File
Apr 24, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-3902 MEDIUM
Mercurial < 4.9 - Path Traversal via Symlinks and Subrepositories
Apr 22, 2019
CVSS 5.1
EPSS 0.01
CVE-2019-11358 MEDIUM
jQuery < 3.4.0 - Prototype Pollution via jQuery.extend
Apr 20, 2019
CVSS 6.1
EPSS 0.87
CVE-2019-11340 MEDIUM
Matrix Sydent <1.0.2 - Info Disclosure
Apr 19, 2019
CVSS 5.9
EPSS 0.02
CVE-2019-11324 HIGH
urllib3 < 1.24.2 - Improper Certificate Validation via SSL Context Handling
Apr 18, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-11236 MEDIUM
urllib3 < 1.24.2 - CRLF Injection via Request Parameter
Apr 15, 2019
CVSS 6.1
EPSS 0.02
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV