pypi
5,093 tracked vulnerabilities.
CVE-2018-5268
MEDIUM
OpenCV 3.3.1 - Heap-Based Buffer Overflow in JPEG2000 Image Parser
Jan 08, 2018
CVSS 5.5
EPSS 0.02
CVE-2017-20182
LOW
Mobile Vikings Django AJAX Utilities <1.2.1 - XSS
Mar 10, 2023
CVSS 3.5
EPSS 0.01
CVE-2017-8761
MEDIUM
OpenStack Swift < 2.10.1, 2.11.0-2.13.0, 2.14.0 - Exposure of Sensitive Information via TempURL Path Logging
Jun 02, 2021
CVSS 4.3
EPSS 0.01
CVE-2017-18638
HIGH
NUCLEI
Graphite < 1.1.5 - Server-Side Request Forgery via Email Composer
Oct 11, 2019
CVSS 7.5
EPSS 0.17
CVE-2017-11427
HIGH
OneLogin PythonSAML < 2.3.0 - Authentication Bypass via SAML Signature Validation Flaw
Apr 17, 2019
CVSS 7.7
EPSS 0.05
CVE-2017-18361
HIGH
Colander < 1.6 - Denial of Service via URL Validator Infinite Loop
Feb 01, 2019
CVSS 7.5
EPSS 0.02
CVE-2017-17836
CRITICAL
Apache Airflow < 1.8.2 - Authenticated Credential Exposure via Experimental Feature
Jan 23, 2019
CVSS 9.8
EPSS 0.03
CVE-2017-17835
HIGH
Apache Airflow < 1.8.2 - Cross-Site Request Forgery
Jan 23, 2019
CVSS 8.8
EPSS 0.01
CVE-2017-15720
HIGH
Apache Airflow < 1.8.2 - Authenticated Remote Code Execution via Special Object Creation
Jan 23, 2019
CVSS 8.8
EPSS 0.02
CVE-2017-1002157
CRITICAL
modulemd < 1.3.1 - Remote Code Execution via Unsafe Function
Jan 10, 2019
CVSS 9.8
EPSS 0.03
CVE-2017-1002152
MEDIUM
Bodhi < 2.9.0 - Cross-Site Scripting via Bug Title Validation
Jan 10, 2019
CVSS 6.1
EPSS 0.01
CVE-2017-5934
MEDIUM
MoinMoin < 1.9.10 - Cross-Site Scripting in GUI Editor Link Dialogue
Oct 15, 2018
CVSS 6.1
EPSS 0.02
CVE-2017-12614
MEDIUM
Apache Airflow < 1.9.0 - Reflected Cross-Site Scripting in 404 Error Page
Aug 06, 2018
CVSS 6.1
EPSS 0.02
CVE-2017-7543
MEDIUM
OpenStack Neutron < 7.2.0-12.1 - Race Condition Disabling Security Groups
Jul 26, 2018
CVSS 5.3
EPSS 0.02
CVE-2017-7481
CRITICAL
Ansible <2.3.1.0-2.4.0.0 - Code Injection
Jul 19, 2018
CVSS 9.8
EPSS 0.05
CVE-2017-2673
MEDIUM
OpenStack Keystone >=9.0.0 - Authenticated Incorrect Authorization in Federation Configurations
Jul 19, 2018
CVSS 6.8
EPSS 0.02
CVE-2017-18342
CRITICAL
PyYAML < 5.1 - Remote Code Execution via yaml.load()
Jun 27, 2018
CVSS 9.8
EPSS 0.06
CVE-2017-7466
HIGH
Ansible < 2.3 - Remote Code Execution via Client Fact Data
Jun 22, 2018
CVSS 8.0
EPSS 0.03
CVE-2017-2592
MEDIUM
oslo.middleware < 3.8.1, 3.19.1, 3.23.1 - Sensitive Information Disclosure in Error Logs
May 08, 2018
CVSS 5.9
EPSS 0.00
CVE-2017-7893
CRITICAL
SaltStack Salt <2016.3.6 - Privilege Escalation
Apr 23, 2018
CVSS 9.8
EPSS 0.01
CVE-2017-0359
CRITICAL
diffoscope < 77 - Arbitrary File Write via Untrusted Archive Contents
Apr 13, 2018
CVSS 9.8
EPSS 0.02
CVE-2017-18191
HIGH
OpenStack Nova 15.0.0-15.1.0 and 16.0.0-16.1.1 - Denial of Service via Encrypted Volume Detach/Reattach
Feb 19, 2018
CVSS 7.5
EPSS 0.04
CVE-2017-15914
HIGH
Borg 1.1.0-1.1.2 - Unauthenticated Repository Restriction Bypass
Feb 08, 2018
CVSS 8.8
EPSS 0.02
CVE-2017-15112
HIGH
keycloak-httpd-client-install < 0.8 - Exposure of Sensitive Information via Command Line Password
Jan 20, 2018
CVSS 7.8
EPSS 0.00
CVE-2017-15111
MEDIUM
keycloak-httpd-client-install < 0.8 - Insecure Temporary File via Symbolic Link
Jan 20, 2018
CVSS 5.5
EPSS 0.00
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
litellm 27
pgadmin4 26
openbabel 24
Quick Filters