pypi

5,093 tracked vulnerabilities.

CVE-2018-7576 MEDIUM
Google TensorFlow < 1.6.0 - Null Pointer Dereference
Apr 23, 2019
CVSS 6.5
EPSS 0.00
CVE-2018-12680 HIGH
CoAPthon 3.1, 4.0.0-4.0.2 - Denial of Service via Serialize.deserialize() Exception Mishandling
Apr 02, 2019
CVSS 7.5
EPSS 0.01
CVE-2018-12679 HIGH
CoAPthon3 1.0-1.0.1 - Denial of Service via Serialize.deserialize() Exception Mishandling
Apr 02, 2019
CVSS 7.5
EPSS 0.01
CVE-2018-16856 MEDIUM
Red Hat Openstack Platform Director - Info Disclosure
Mar 26, 2019
CVSS 5.5
EPSS 0.01
CVE-2018-20244 MEDIUM
Apache Airflow < 1.10.2 - Stored Cross-Site Scripting via Metadata Database State Manipulation
Feb 27, 2019
CVSS 5.5
EPSS 0.02
CVE-2018-11760 MEDIUM
PySpark <2.3.1 - Privilege Escalation
Feb 04, 2019
CVSS 5.5
EPSS 0.01
CVE-2018-20245 HIGH
Apache Airflow <1.10.1 - Info Disclosure
Jan 23, 2019
CVSS 7.5
EPSS 0.01
CVE-2018-16876 MEDIUM
ansible <2.5.14-2.7.5 - Info Disclosure
Jan 03, 2019
CVSS 5.3
EPSS 0.02
CVE-2018-20325 CRITICAL
Definitions Parser - Command Injection
Dec 21, 2018
CVSS 9.8
EPSS 0.03
CVE-2018-1000872 MEDIUM
PyKMIP < 0.8.0 - Denial of Service via Socket Exhaustion
Dec 20, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1000843 HIGH
Luigi < 2.8.0 - Cross-Site Request Forgery via /api/<method> Endpoint
Dec 20, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-1000814 MEDIUM
aio-libs aiohttp-session <=2.6.0 - Non-Expiring Sessions
Dec 20, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-20133 CRITICAL
ymlref - Code Injection
Dec 17, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-20060 CRITICAL
urllib3 < 1.23 - Authorization Header Exposure via Cross-Origin Redirect
Dec 11, 2018
CVSS 9.8
EPSS 0.04
CVE-2018-19960 HIGH
OnionShare <1.3.1 - Info Disclosure
Dec 07, 2018
CVSS 7.0
EPSS 0.00
CVE-2018-19787 MEDIUM
lxml < 4.2.5 - Cross-Site Scripting via Escaped JavaScript URLs
Dec 02, 2018
CVSS 6.1
EPSS 0.02
CVE-2018-16859 MEDIUM
Ansible Engine <2.8 - Info Disclosure
Nov 29, 2018
CVSS 4.2
EPSS 0.01
CVE-2018-19443 MEDIUM
Tryton 5.x <5.0.1 - Info Disclosure
Nov 22, 2018
CVSS 5.9
EPSS 0.01
CVE-2018-19352 MEDIUM
Jupyter Notebook < 5.7.2 - Cross-Site Scripting via Crafted Directory Name
Nov 18, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-19351 MEDIUM
Jupyter Notebook < 5.7.1 - Cross-Site Scripting via Nbconvert Endpoint
Nov 18, 2018
CVSS 6.1
EPSS 0.02
CVE-2018-18920 HIGH
Py-EVM v0.2.0-alpha.33 - Denial of Service via Invalid Opcode in Bytecode Execution
Nov 12, 2018
CVSS 8.8
EPSS 0.03
CVE-2018-8021 CRITICAL
Apache Superset < 0.23 - Remote Code Execution via Pickle Deserialization
Nov 07, 2018
CVSS 9.8
EPSS 0.54
CVE-2018-16849 LOW
Openstack-mistral - Info Disclosure
Nov 02, 2018
CVSS 3.1
EPSS 0.02
CVE-2018-15751 CRITICAL
SaltStack Salt < 2017.7.8 and 2018.3.x < 2018.3.3 - Unauthenticated Remote Code Execution via salt-api
Oct 24, 2018
CVSS 9.8
EPSS 0.05
CVE-2018-15750 MEDIUM
SaltStack Salt < 2017.7.8 and 2018.3.x < 2018.3.3 - Directory Traversal in salt-api
Oct 24, 2018
CVSS 5.3
EPSS 0.04
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV