pypi

5,097 tracked vulnerabilities.

CVE-2016-1241 MEDIUM
Tryton <3.2.17, <3.4.14, <3.6.12, <3.8.8, <4.0.4 - Info Disclosure
Sep 07, 2016
CVSS 5.3
EPSS 0.02
CVE-2016-6298 MEDIUM
jwcrypto < 0.3.2 - Exposure of Sensitive Information via RSA 1.5 Algorithm
Sep 01, 2016
CVSS 5.3
EPSS 0.02
CVE-2016-6186 MEDIUM
Django <1.8.14, <1.9.x, <1.10rc1 - XSS
Aug 05, 2016
CVSS 6.1
EPSS 0.06
CVE-2016-4985 HIGH
OpenStack Ironic < 4.2.5 and 5.x < 5.1.2 - Unauthenticated Sensitive Information Exposure via Vendor Passthru Request
Jul 12, 2016
CVSS 7.5
EPSS 0.03
CVE-2016-4428 MEDIUM
OpenStack Horizon < 8.0.1 and 9.0.0-9.0.1 - Authenticated Cross-Site Scripting via AngularJS Template Injection
Jul 12, 2016
CVSS 5.4
EPSS 0.02
CVE-2016-5363 HIGH
OpenStack Neutron < 7.0.4 and 8.0.0-8.1.0 - MAC Spoofing Bypass via DHCP Discovery or Non-IP Traffic
Jun 17, 2016
CVSS 8.2
EPSS 0.03
CVE-2016-5362 HIGH
OpenStack Neutron 7.0.0-7.0.3 and 8.0.0-8.1.0 - Denial of Service via DHCP Discovery Message
Jun 17, 2016
CVSS 8.2
EPSS 0.03
CVE-2016-4911 MEDIUM
OpenStack Identity (Keystone) 9.0.0 - Authenticated Improper Access Control via Fernet Token Rescoping
Jun 13, 2016
CVSS 4.3
EPSS 0.01
CVE-2016-3096 HIGH
Fedora < 1.9.6 - Symlink Following
Jun 03, 2016
CVSS 7.8
EPSS 0.00
CVE-2016-3105 HIGH
Debian Linux < 3.7.3 - Improper Access Control
May 09, 2016
CVSS 8.8
EPSS 0.03
CVE-2016-0757 MEDIUM
OpenStack Image Service - Privilege Escalation
Apr 13, 2016
CVSS 4.3
EPSS 0.01
CVE-2016-4009 CRITICAL
Pillow < 3.1.1 - Heap-Based Buffer Overflow via Negative Resample Size
Apr 13, 2016
CVSS 9.8
EPSS 0.08
CVE-2016-3630 HIGH
Mercurial <3.7.3 - Remote Code Execution
Apr 13, 2016
CVSS 8.8
EPSS 0.05
CVE-2016-3069 HIGH
Mercurial < 3.7.3 - Remote Code Execution via Git Repository Conversion
Apr 13, 2016
CVSS 8.8
EPSS 0.05
CVE-2016-3068 HIGH
Debian Linux < 3.7.2 - Improper Input Validation
Apr 13, 2016
CVSS 8.8
EPSS 0.05
CVE-2016-2533 MEDIUM
Pillow < 3.1.1 - Buffer Overflow in ImagingPcdDecode
Apr 13, 2016
CVSS 6.5
EPSS 0.04
CVE-2016-0775 MEDIUM
Pillow < 3.1.1 - Buffer Overflow in FLI File Decoder
Apr 13, 2016
CVSS 6.5
EPSS 0.03
CVE-2016-0740 MEDIUM
Pillow < 3.1.1 - Buffer Overflow in TIFF Image Decoding
Apr 13, 2016
CVSS 6.5
EPSS 0.02
CVE-2016-2140 MEDIUM
OpenStack Nova < 12.0.3 - Authenticated Arbitrary File Read via Crafted qcow2 Header
Apr 12, 2016
CVSS 5.3
EPSS 0.02
CVE-2016-1866 HIGH
Salt 2015.8.x < 2015.8.4 - Remote Code Execution via Minion-Master Data Stream
Apr 12, 2016
CVSS 8.1
EPSS 0.02
CVE-2016-2513 LOW
Django < 1.8.10 and 1.9.x < 1.9.3 - User Enumeration via Timing Attack
Apr 08, 2016
CVSS 3.1
EPSS 0.03
CVE-2016-2512 HIGH
Django < 1.8.10 and 1.9.x < 1.9.3 - Open Redirect and Cross-Site Scripting via URL with Basic Authentication
Apr 08, 2016
CVSS 7.4
EPSS 0.04
CVE-2016-2048 MEDIUM
Django 1.9.x < 1.9.2 - Authenticated Access Control Bypass via ModelAdmin Save As New
Feb 08, 2016
CVSS 5.5
EPSS 0.02
CVE-2016-1505 CRITICAL
Radicale < 1.1 - Path Traversal and Arbitrary File Write via Filesystem Storage Backend
Feb 03, 2016
CVSS 10.0
EPSS 0.03
CVE-2016-0738 HIGH
OpenStack Swift < 2.3.1 - Denial of Service via Large Object URL Requests
Jan 29, 2016
CVSS 7.5
EPSS 0.04
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 pypdf 32 opencv-contrib-python 30 opencv-python 30 langflow 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV