pypi

5,097 tracked vulnerabilities.

CVE-2017-3590 LOW
Oracle MySQL Connector/Python <2.1.5 - SQL Injection
Apr 24, 2017
CVSS 3.3
EPSS 0.00
CVE-2017-5936 HIGH
OpenStack Nova-LXD <13.1.1 - Privilege Escalation
Apr 12, 2017
CVSS 7.5
EPSS 0.03
CVE-2017-7234 MEDIUM
Django <1.10.7, <1.9.13, <1.8.18 - Open Redirect
Apr 04, 2017
CVSS 6.1
EPSS 0.02
CVE-2017-7233 MEDIUM
Django <1.10.7-1.9.13-1.8.18 - Open Redirect
Apr 04, 2017
CVSS 6.1
EPSS 0.02
CVE-2017-0360 MEDIUM
Tryton 3.x-4.2.2 - Authenticated Arbitrary File Read via Same Root Name Suffix Attack
Apr 04, 2017
CVSS 5.3
EPSS 0.02
CVE-2017-7400 MEDIUM
OpenStack Horizon 9.x-9.1.1 10.x-10.0.2 11.0.0 - Authenticated Cross-Site Scripting via Federation Mapping
Apr 03, 2017
CVSS 4.8
EPSS 0.01
CVE-2017-7266 MEDIUM
Netflix Security Monkey <0.8.0 - Open Redirect
Mar 26, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-5524 MEDIUM
Plone 4.x-4.3.11 and 5.x-5.0.6 - Sandbox Protection Bypass via Python String Format Method
Mar 23, 2017
CVSS 4.3
EPSS 0.01
CVE-2017-7235 HIGH
cloudflare-scrape 1.6.6-1.7.1 - Remote Code Execution via Malicious Website
Mar 23, 2017
CVSS 8.8
EPSS 0.02
CVE-2017-7214 CRITICAL
OpenStack Nova <15.0.1 - Info Disclosure
Mar 21, 2017
CVSS 9.8
EPSS 0.02
CVE-2017-7200 MEDIUM
OpenStack Glance < Newton - Server-Side Request Forgery via Image Service API v1 copy_from Feature
Mar 21, 2017
CVSS 5.8
EPSS 0.02
CVE-2017-6952 HIGH
capstone < 3.0.4 - Integer Overflow in cs_winkernel_malloc
Mar 16, 2017
CVSS 8.8
EPSS 0.01
CVE-2017-5537 MEDIUM
Weblate < 2.10.1 - User Enumeration via Password Reset Error Messages
Mar 15, 2017
CVSS 5.3
EPSS 0.02
CVE-2017-6591 MEDIUM
django-epiceditor 0.2.3 - Cross-Site Scripting via Form Field
Mar 09, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-5992 HIGH
openpyxl < 2.4.2 - XML External Entity Injection via Crafted .xlsx Document
Feb 15, 2017
CVSS 8.2
EPSS 0.01
CVE-2017-5591 MEDIUM
SleekXMPP < 1.3.1 and Slixmpp < 1.2.3 - Remote User Impersonation via XEP-0280 Message Carbons
Feb 09, 2017
CVSS 5.9
EPSS 0.01
CVE-2016-20021 CRITICAL
Gentoo Portage <3.0.47 - Info Disclosure
Jan 12, 2024
CVSS 9.8
EPSS 0.00
CVE-2016-15010 LOW
University of Cambridge django-ucamlookup <1.9.2 - XSS
Jan 05, 2023
CVSS 3.5
EPSS 0.01
CVE-2016-1000111 MEDIUM
Twisted < 16.3.1 - Remote Proxy Redirection via HTTP_PROXY Environment Variable
Mar 11, 2020
CVSS 5.3
EPSS 0.03
CVE-2016-7404 CRITICAL
OpenStack Magnum - Exposure of Sensitive Information via Heat Template Credential Handling
Jun 21, 2019
CVSS 9.8
EPSS 0.02
CVE-2016-7151 MEDIUM
capstone < 4.0.0 - Out-of-bounds Read in X86_insn_reg_intel
May 15, 2019
CVSS 5.5
EPSS 0.01
CVE-2016-10745 HIGH
Jinja < 2.8.1 - Sandbox Escape via str.format
Apr 08, 2019
CVSS 8.6
EPSS 0.03
CVE-2016-9605 MEDIUM
cobbler 2.6.11-1 - Arbitrary File Read via Invalid Parameter Validation
Aug 22, 2018
CVSS 6.1
EPSS 0.01
CVE-2016-8640 CRITICAL
pycsw <2.0.2, 1.10.5, 1.8.6 - SQL Injection
Aug 01, 2018
CVSS 9.1
EPSS 0.02
CVE-2016-8614 MEDIUM
Ansible <2.2.0 - OpenPGP Key Injection
Jul 31, 2018
CVSS 6.3
EPSS 0.02
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 pypdf 32 opencv-contrib-python 30 opencv-python 30 langflow 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV