pypi

5,093 tracked vulnerabilities.

CVE-2019-0229 HIGH
Apache Airflow < 1.10.2 - Cross-Site Request Forgery
Apr 10, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-0216 MEDIUM
Apache Airflow < 1.10.2 - Stored Cross-Site Scripting via Metadata Database Manipulation
Apr 10, 2019
CVSS 4.8
EPSS 0.03
CVE-2019-10906 HIGH
Pallets Jinja <2.10.1 - RCE
Apr 07, 2019
CVSS 8.6
EPSS 0.04
CVE-2019-10904 MEDIUM
Debian Linux < 2.0.0alpha0 - XSS
Apr 06, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-10876 MEDIUM
OpenStack Neutron <11.0.7-13.0.3 - DoS
Apr 05, 2019
CVSS 6.5
EPSS 0.02
CVE-2019-10868 MEDIUM
Tryton 4.2.0-4.2.20, 4.4.0-4.4.18, 4.6.0-4.6.13, 4.8.0-4.8.9, 5.0.0-5.0.5 - Missing Authorization in Model Storage
Apr 05, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-10856 MEDIUM
Jupyter Notebook < 5.7.8 - Open Redirect via Empty Netloc
Apr 04, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-10844 CRITICAL
Sony Neural Network Libraries <1.0.14 - Info Disclosure
Apr 04, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-10255 MEDIUM
JupyterHub < 0.9.5 and Jupyter Notebook < 5.7.7 - Open Redirect via Login Page
Mar 28, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-3828 MEDIUM
Ansible < 2.5.15 - Path Traversal via Fetch Module Absolute Path
Mar 27, 2019
CVSS 4.2
EPSS 0.01
CVE-2019-3830 HIGH
OpenStack Ceilometer < 12.0.0.0rc1 - Sensitive Information Exposure in Log Files
Mar 26, 2019
CVSS 7.8
EPSS 0.00
CVE-2019-7539 HIGH
ipycache <2016-05-31 - Code Injection
Mar 21, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-7537 CRITICAL
Donfig 0.3.0 - Remote Code Execution via collect_yaml Method
Mar 21, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-6690 HIGH
python-gnupg 0.4.3 - Improper Input Validation
Mar 21, 2019
CVSS 7.5
EPSS 0.09
CVE-2019-5885 HIGH
Matrix Synapse <0.34.0.1 - Privilege Escalation
Mar 21, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-5729 HIGH
Splunk-SDK-Python < 1.6.6 - Improper Certificate Validation
Mar 21, 2019
CVSS 8.1
EPSS 0.01
CVE-2019-9735 MEDIUM
OpenStack Neutron <13.0.3 - Privilege Escalation
Mar 13, 2019
CVSS 6.5
EPSS 0.04
CVE-2019-9644 MEDIUM
Jupyter Notebook < 5.7.6 - Cross-Site Scripting Inclusion via Error Message Capture
Mar 12, 2019
CVSS 5.4
EPSS 0.02
CVE-2019-9710 HIGH
webargs < 5.1.3 - Race Condition in JSON Body Parsing Cache
Mar 12, 2019
CVSS 8.1
EPSS 0.01
CVE-2019-7164 CRITICAL
SQLAlchemy <1.2.18, <1.3.0b3 - SQL Injection
Feb 20, 2019
CVSS 9.8
EPSS 0.04
CVE-2019-6975 HIGH
Django <1.11.19, <2.0.11, <2.1.6 - Memory Corruption
Feb 11, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-7560 MEDIUM
Boolector 3.0.0 - Use-After-Free in BTOR2 Parser
Feb 07, 2019
CVSS 5.5
EPSS 0.01
CVE-2019-7548 HIGH
SQLAlchemy 1.2.17 - SQL Injection via group_by Parameter
Feb 06, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-1000021 HIGH
slixmpp <7cd73b594e8122dddf847953fcfc85ab4d316416 - Info Disclosure
Feb 04, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-1000007 HIGH
aioxmpp < 0.10.2 - Denial of Service via Stanza Parser Rollback
Feb 04, 2019
CVSS 7.4
EPSS 0.01