pypi

5,097 tracked vulnerabilities.

CVE-2016-9910 MEDIUM
html5lib < 0.99999999 - Cross-Site Scripting via Attribute Value Serialization
Feb 22, 2017
CVSS 6.1
EPSS 0.02
CVE-2016-9909 MEDIUM
html5lib < 0.99999999 - Cross-Site Scripting via Attribute Value Mishandling
Feb 22, 2017
CVSS 6.1
EPSS 0.02
CVE-2016-9639 CRITICAL
Salt < 2015.8.11 - Improper Access Control via Minion ID Caching
Feb 07, 2017
CVSS 9.1
EPSS 0.03
CVE-2016-7147 MEDIUM
Plone - Cross-Site Scripting in Zope ZMI Search Feature
Feb 04, 2017
CVSS 6.1
EPSS 0.01
CVE-2016-3176 MEDIUM
Salt < 2015.5.10 and 2015.8.x < 2015.8.8 - Authentication Bypass via PAM Service Manipulation
Jan 31, 2017
CVSS 5.6
EPSS 0.01
CVE-2016-9119 MEDIUM
MoinMoin < 1.9.8 - Cross-Site Scripting in GUI Editor Link Dialogue
Jan 30, 2017
CVSS 6.1
EPSS 0.01
CVE-2016-7036 CRITICAL
python-jose <1.3.2 - Info Disclosure
Jan 23, 2017
CVSS 9.8
EPSS 0.02
CVE-2016-10075 HIGH
tqdm 4.4.1-4.10 - Local Code Execution via Malicious Git Log
Jan 19, 2017
CVSS 7.8
EPSS 0.00
CVE-2016-9015 LOW
Python urllib3 <1.19 - Info Disclosure
Jan 11, 2017
CVSS 3.7
EPSS 0.01
CVE-2016-4808 HIGH
web2py < 2.14.5 - Cross-Site Request Forgery
Jan 11, 2017
CVSS 8.8
EPSS 0.02
CVE-2016-4807 MEDIUM
web2py < 2.14.5 - Reflected Cross-Site Scripting
Jan 11, 2017
CVSS 4.8
EPSS 0.02
CVE-2016-6581 HIGH
HPACK 1.0.0-2.2.0 - Denial of Service via HPACK Bomb Compression Attack
Jan 10, 2017
CVSS 7.5
EPSS 0.02
CVE-2016-6580 HIGH
Python Priority Library <1.2.0 - DoS
Jan 10, 2017
CVSS 7.5
EPSS 0.02
CVE-2016-5851 HIGH
python-docx < 0.8.6 - XML External Entity Injection via Crafted Document
Dec 21, 2016
CVSS 8.8
EPSS 0.02
CVE-2016-9964 MEDIUM
bottle 0.12.10 - CRLF Injection via redirect() Function
Dec 16, 2016
CVSS 6.5
EPSS 0.02
CVE-2016-9014 HIGH
Django <1.8.16-1.10.3 - Server-Side Request Forgery
Dec 09, 2016
CVSS 8.1
EPSS 0.06
CVE-2016-9013 CRITICAL
Django <1.8.16, 1.9.x <1.9.11, 1.10.x <1.10.3 - Info Disclosure
Dec 09, 2016
CVSS 9.8
EPSS 0.05
CVE-2016-7148 MEDIUM
MoinMoin < 1.9.9 - Cross-Site Scripting via AttachFile Page Name
Nov 10, 2016
CVSS 6.1
EPSS 0.01
CVE-2016-7146 MEDIUM
MoinMoin 1.9.8 - Cross-Site Scripting via FCKeditor Attachment Dialog
Nov 10, 2016
CVSS 6.1
EPSS 0.01
CVE-2016-9190 HIGH
Pillow < 3.3.2 - Remote Code Execution via Crafted Image File
Nov 04, 2016
CVSS 7.8
EPSS 0.02
CVE-2016-9189 MEDIUM
Pillow < 3.3.2 - Integer Overflow in Image.core.map_buffer
Nov 04, 2016
CVSS 5.5
EPSS 0.02
CVE-2016-1000001 HIGH
flask-oidc < 0.1.2 - Open Redirect
Oct 07, 2016
CVSS 7.4
EPSS 0.01
CVE-2016-7401 HIGH
Canonical Ubuntu Linux < 1.8.14 - Security Feature Bypass
Oct 03, 2016
CVSS 7.5
EPSS 0.06
CVE-2016-4972 CRITICAL
OpenStack Murano < 1.0.3 and 2.x < 2.0.1 - Remote Code Execution via YAML Loader Inheritance
Sep 26, 2016
CVSS 9.8
EPSS 0.03
CVE-2016-1242 MEDIUM
Tryton <3.2.17, <3.4.14, <3.6.12, <3.8.8, <4.0.4 - Info Disclosure
Sep 07, 2016
CVSS 4.4
EPSS 0.02
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 pypdf 32 opencv-contrib-python 30 opencv-python 30 langflow 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV