pypi

5,097 tracked vulnerabilities.

CVE-2016-0737 HIGH
OpenStack Swift < 2.4.0 - Denial of Service via Interrupted Large Object Requests
Jan 29, 2016
CVSS 7.5
EPSS 0.04
CVE-2016-1494 MEDIUM
Python-RSA < 3.3 - Signature Spoofing via BERserk Padding Attack
Jan 13, 2016
CVSS 5.3
EPSS 0.07
CVE-2015-9543 LOW
OpenStack Nova < 18.2.4, 19.x < 19.1.0, 20.x < 20.1.0 - Exposure of Sensitive Consoleauth Tokens in Log Files
Feb 19, 2020
CVSS 3.3
EPSS 0.00
CVE-2015-8549 HIGH
PyAMF < 0.8.0 - XML External Entity Injection via AMF Payload
Jan 15, 2020
CVSS 7.1
EPSS 0.01
CVE-2015-5694 MEDIUM
OpenStack Designate - Denial of Service via DNS Record Set Size Limit Bypass
Nov 22, 2019
CVSS 6.5
EPSS 0.02
CVE-2015-1326 MEDIUM
python-dbusmock <0.15.1 - Code Injection
Apr 22, 2019
CVSS 5.7
EPSS 0.02
CVE-2015-5159 HIGH
kdcproxy < 0.3.2 - Denial of Service via Large POST Request
Oct 30, 2018
CVSS 7.5
EPSS 0.02
CVE-2015-7529 HIGH
sos 3.0-3.8 - Local Privilege Escalation via Symlink Attack on Temporary Archive File
Nov 06, 2017
CVSS 7.8
EPSS 0.00
CVE-2015-6918 MEDIUM
SaltStack Salt < 2015.5.5 - Exposure of Sensitive Information via Log Leak
Oct 10, 2017
CVSS 6.3
EPSS 0.01
CVE-2015-7293 HIGH
Plone - Cross-Site Request Forgery
Sep 25, 2017
CVSS 8.8
EPSS 0.03
CVE-2015-7318 HIGH
Plone 3.3.0-3.3.6 - HTTP Response Header Injection
Sep 25, 2017
CVSS 7.5
EPSS 0.02
CVE-2015-7316 MEDIUM
Plone 3.3.0-3.3.6 4.0.0-4.0.10 4.1.0-4.1.6 4.2.0-4.2.7 4.3.x<4.3.7 5.0rc1 - Cross-Site Scripting
Sep 25, 2017
CVSS 6.1
EPSS 0.01
CVE-2015-7315 MEDIUM
Plone 3.3.0-4.3.6 and 5.0rc1 - Unauthenticated User Registration Bypass
Sep 25, 2017
CVSS 5.9
EPSS 0.02
CVE-2015-4706 MEDIUM
IPython 3.x < 3.2 - Cross-Site Scripting via JSON Error Messages
Sep 21, 2017
CVSS 6.1
EPSS 0.02
CVE-2015-0276 HIGH
Kallithea < 0.2 - Cross-Site Request Forgery
Sep 21, 2017
CVSS 8.8
EPSS 0.01
CVE-2015-4707 MEDIUM
IPython < 3.2.0 - Cross-Site Scripting via JSON Error Messages
Sep 20, 2017
CVSS 6.1
EPSS 0.02
CVE-2015-5607 HIGH
IPython 2-3 - Cross-Site Request Forgery in REST API
Sep 20, 2017
CVSS 8.8
EPSS 0.01
CVE-2015-1864 MEDIUM
Kallithea < 0.2.1 - Cross-Site Scripting via User Details or Description Fields
Sep 19, 2017
CVSS 5.4
EPSS 0.01
CVE-2015-5695 MEDIUM
OpenStack Designate 2015.1.0-1.0.0.0b1 - Denial of Service via Zone File Transfer
Aug 31, 2017
CVSS 6.5
EPSS 0.02
CVE-2015-4017 HIGH
Salt < 2014.7.6 - Improper Certificate Validation in Aliyun, Proxmox, and Splunk Modules
Aug 25, 2017
CVSS 7.5
EPSS 0.01
CVE-2015-3206 HIGH
pykerberos - Improper Authentication via KDC Response Spoofing
Aug 25, 2017
CVSS 8.1
EPSS 0.02
CVE-2015-5081 HIGH
django-cms < 3.0.14 - Cross-Site Request Forgery
Aug 18, 2017
CVSS 8.8
EPSS 0.01
CVE-2015-4082 MEDIUM
attic < 0.15 - Unauthenticated Sensitive Information Exposure via Manifest Type Byte Manipulation
Aug 18, 2017
CVSS 6.5
EPSS 0.02
CVE-2015-3156 MEDIUM
OpenStack Trove < 2014.2.4 - Symlink Attack via Temporary File in Configuration Functions
Aug 11, 2017
CVSS 5.5
EPSS 0.00
CVE-2015-2687 MEDIUM
OpenStack Compute - Improper Access Control via Failed Live Migration
Aug 09, 2017
CVSS 4.7
EPSS 0.00
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 pypdf 32 opencv-contrib-python 30 opencv-python 30 langflow 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV