pypi

5,097 tracked vulnerabilities.

CVE-2015-0846
django-markupfield < 1.3.2 - Arbitrary File Read via Default RESTRUCTUREDTEXT_FILTER_SETTINGS
Apr 24, 2015
EPSS 0.02
CVE-2015-1856
OpenStack Swift < 2.3.0 - Authenticated Arbitrary Object Deletion via x-versions-location Container
Apr 17, 2015
EPSS 0.04
CVE-2015-1852
OpenStack keystonemiddleware <1.6.0/python-keystoneclient <1.4.0 - ...
Apr 17, 2015
EPSS 0.03
CVE-2015-0259
OpenStack Nova < 2014.1.4, 2014.2.x < 2014.2.3, kilo < kilo-3 - WebSocket Authentication Hijacking via Crafted Webpage
Apr 01, 2015
EPSS 0.01
CVE-2015-0838
Debian Linux < 0.9.8 - Memory Corruption
Mar 31, 2015
EPSS 0.03
CVE-2015-2317
Debian Linux < 1.4.19 - XSS
Mar 25, 2015
EPSS 0.05
CVE-2015-2316
Oracle Solaris < 1.6.11 - Resource Management Error
Mar 25, 2015
EPSS 0.05
CVE-2015-2296
requests <2.5.3 - Server-Side Request Forgery
Mar 18, 2015
EPSS 0.03
CVE-2015-2241
Django < 1.7.6 and 1.8 < 1.8b2 - Cross-Site Scripting via ModelAdmin.readonly_fields
Mar 12, 2015
EPSS 0.02
CVE-2015-1881
OpenStack Glance 2014.2-2014.2.2 Authenticated DoS via Task v2 API Image Deletion
Feb 24, 2015
EPSS 0.02
CVE-2015-0260
Kallithea < 0.2 and RhodeCode < 2.2.7 - Authenticated Exposure of Sensitive Information via get_repo API
Feb 16, 2015
EPSS 0.01
CVE-2015-1195
OpenStack Image Registry and Delivery Service - Info Disclosure
Jan 21, 2015
EPSS 0.03
CVE-2015-0222
Canonical Ubuntu Linux < 1.4.17 - Denial of Service
Jan 16, 2015
EPSS 0.03
CVE-2015-0221
Django < 1.4.18, 1.6.x < 1.6.10, 1.7.x < 1.7.3 - Denial of Service via Long Line in File
Jan 16, 2015
EPSS 0.04
CVE-2015-0220
Canonical Ubuntu Linux < 1.4.17 - XSS
Jan 16, 2015
EPSS 0.03
CVE-2015-0219
Django <1.4.18, 1.6.x <1.6.10, 1.7.x <1.7.3 - Info Disclosure
Jan 16, 2015
EPSS 0.07
CVE-2014-4659 MEDIUM
Ansible < 1.5.5 - Insufficiently Protected Credentials via sources.list File Permissions
Feb 20, 2020
CVSS 5.5
EPSS 0.00
CVE-2014-4658 MEDIUM
Ansible < 1.5.5 - Unauthorized Exposure of Sensitive Vault Key Information
Feb 20, 2020
CVSS 5.5
EPSS 0.00
CVE-2014-4657 CRITICAL
Ansible < 1.5.4 - Remote Code Execution via Safe Eval Function
Feb 20, 2020
CVSS 9.8
EPSS 0.04
CVE-2014-4678 CRITICAL
Ansible < 1.6.4 - Remote Code Execution via safe_eval Function
Feb 20, 2020
CVSS 9.8
EPSS 0.05
CVE-2014-4660 MEDIUM
Ansible < 1.5.5 - Insufficiently Protected Credentials via sources.list deb Line Parsing
Feb 20, 2020
CVSS 5.5
EPSS 0.00
CVE-2014-4967 CRITICAL
Ansible < 1.6.7 - Remote Code Execution via Crafted Fact Argument Injection
Feb 18, 2020
CVSS 9.8
EPSS 0.04
CVE-2014-4966 CRITICAL
Ansible < 1.6.7 - Remote Code Execution via Crafted Jinja2 Template Injection
Feb 18, 2020
CVSS 9.8
EPSS 0.04
CVE-2014-9390 CRITICAL
Malicious Git and Mercurial HTTP Server For CVE-2014-9390
Feb 12, 2020
CVSS 9.8
EPSS 0.63
CVE-2014-9720 MEDIUM
Tornado < 3.2.2 - Observable Discrepancy via BREACH Attack
Jan 24, 2020
CVSS 6.5
EPSS 0.02