pypi
5,097 tracked vulnerabilities.
CVE-2017-16239
MEDIUM
OpenStack Nova <14.0.9, <15.0.7, <16.0.2 - Privilege Escalation
Nov 14, 2017
CVSS 6.5
EPSS 0.01
CVE-2017-0906
CRITICAL
Recurly Client Python Library <2.0.5-2.6.2 - SSRF
Nov 13, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-16764
CRITICAL
django_make_app 0.1.3 - Command Injection
Nov 10, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-16763
CRITICAL
Confire 0.2.0 - Remote Code Execution via YAML Parsing in config.py
Nov 10, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-16762
HIGH
Sanic < 0.5.1 - Path Traversal via Static Endpoint
Nov 10, 2017
CVSS 7.5
EPSS 0.02
CVE-2017-16618
CRITICAL
OwlMixin <2.0.0a12 - Command Injection
Nov 08, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-16616
CRITICAL
PyAnyAPI <0.6.1 - Command Injection
Nov 08, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-16615
CRITICAL
MLAlchemy <0.2.2 - Command Injection
Nov 08, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-16228
CRITICAL
dulwich < 0.18.5 - Remote Code Execution via SSH URL Hostname
Oct 29, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-14696
HIGH
SaltStack Salt DoS via Crafted Authentication Request
Oct 24, 2017
CVSS 7.5
EPSS 0.03
CVE-2017-14695
CRITICAL
SaltStack Salt < 2016.3.8, 2016.11.x < 2016.11.8, 2017.7.x < 2017.7.2 - Directory Traversal in Minion ID Validation
Oct 24, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-15612
MEDIUM
mistune 0.7.4 - Cross-Site Scripting via Newline or Email Address Handling
Oct 19, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-1002153
HIGH
Koji 1.13.0 - Improper Input Validation in SCM Path Handling
Oct 06, 2017
CVSS 7.5
EPSS 0.01
CVE-2017-1000116
CRITICAL
Mercurial < 4.3 - OS Command Injection via SSH Hostname
Oct 05, 2017
CVSS 9.8
EPSS 0.06
CVE-2017-1000115
HIGH
Mercurial < 4.3 - Arbitrary File Write via Symlink Attack
Oct 05, 2017
CVSS 7.5
EPSS 0.05
CVE-2017-5200
HIGH
SaltStack Salt <2015.8.13, <2016.3.5, <2016.11.2 - Command Injection
Sep 26, 2017
CVSS 8.8
EPSS 0.03
CVE-2017-5192
HIGH
SaltStack Salt < 2015.8.13, 2016.3.x < 2016.3.5, 2016.11.x < 2016.11.2 - Authentication Bypass via local_batch Client
Sep 26, 2017
CVSS 8.8
EPSS 0.02
CVE-2017-7549
MEDIUM
Red Hat OpenStack - Symbolic-Link Attack
Sep 21, 2017
CVSS 6.4
EPSS 0.00
CVE-2017-2809
HIGH
ansible-vault < 1.0.5 - Remote Code Execution via YAML Loading
Sep 14, 2017
CVSS 7.5
EPSS 0.03
CVE-2017-1002150
MEDIUM
python-fedora <0.8.0 - Open Redirect
Sep 14, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-12612
HIGH
Apache Spark 1.6.0-2.1.1 - Remote Code Execution via Launcher API Deserialization
Sep 13, 2017
CVSS 7.8
EPSS 0.01
CVE-2017-12794
MEDIUM
NUCLEI
Django Debug Page - Cross-Site Scripting
Sep 07, 2017
CVSS 6.1
EPSS 0.24
CVE-2017-14158
HIGH
Scrapy - Denial of Service via Large File Memory Consumption
Sep 05, 2017
CVSS 7.5
EPSS 0.02
CVE-2017-14136
MEDIUM
OpenCV 3.3 - Out-of-bounds Write in FillColorRow1 Function
Sep 04, 2017
CVSS 6.5
EPSS 0.02
CVE-2017-11424
HIGH
PyJWT < 1.5.0 - Key Confusion Attack via PKCS1 PEM Public Key
Aug 24, 2017
CVSS 7.5
EPSS 0.02
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
pypdf 32
opencv-contrib-python 30
opencv-python 30
langflow 28
PraisonAI 27
litellm 27
pgadmin4 26
openbabel 24
Quick Filters