pypi

5,097 tracked vulnerabilities.

CVE-2014-3497
OpenStack Swift 1.11.0-1.13.1 - Cross-Site Scripting via WWW-Authenticate Header
Jul 03, 2014
EPSS 0.02
CVE-2014-4301
Eugene Pankov Ajenti <1.2.21.7 - XSS
Jun 18, 2014
EPSS 0.02
CVE-2014-3476
OpenStack Keystone Privilege Escalation via Chained Delegation
Jun 17, 2014
EPSS 0.02
CVE-2014-3995
Djblets < 0.7.30 - Cross-Site Scripting via User Display Name
Jun 16, 2014
EPSS 0.02
CVE-2014-3994
Djblets < 0.7.30 and 0.8.x < 0.8.3 - Cross-Site Scripting via JSON Object in User Name Field
Jun 16, 2014
EPSS 0.02
CVE-2014-3840
Mayan EDMS 0.13 - Authenticated Stored Cross-Site Scripting via Tag, Title, Name, or Smart Link Fields
May 27, 2014
EPSS 0.03
CVE-2014-3801
OpenStack Heat 2013.2-2013.2.3 and 2014.1 - Authenticated Provider Template URL Exposure via Resource-Type-List
May 23, 2014
EPSS 0.02
CVE-2014-1402
Jinja2 < 2.7.2 - Local Privilege Escalation via Temporary File Handling
May 19, 2014
EPSS 0.00
CVE-2014-0012
Jinja2 <2.7.2 - Privilege Escalation
May 19, 2014
EPSS 0.00
CVE-2014-3730
Canonical Ubuntu Linux < 1.4.13 - Improper Input Validation
May 16, 2014
EPSS 0.03
CVE-2014-1418
Django <1.4.13, <1.5.8, <1.6.5, <1.7b4 - Info Disclosure
May 16, 2014
EPSS 0.03
CVE-2014-3146 MEDIUM
lxml < 3.3.5 - Cross-Site Scripting via Control Characters in Link Scheme
May 14, 2014
CVSS 6.1
EPSS 0.06
CVE-2014-3225
Cobbler 2.4.x-2.6.x - Authenticated Path Traversal via Kickstart Field
May 14, 2014
EPSS 0.09
CVE-2014-3243
SOAPpy < 0.12.6 - Denial of Service via Nested Entity Expansion
May 12, 2014
EPSS 0.03
CVE-2014-3242
SOAPpy 0.12.5 - XML External Entity Injection via SOAP Request
May 12, 2014
EPSS 0.02
CVE-2014-1934
eyeD3 <7.0.3, 0.6.18 - Local File Modification
May 08, 2014
EPSS 0.00
CVE-2014-0134
OpenStack Compute (Nova) <2013.2.3-2014.1 - Info Disclosure
May 08, 2014
EPSS 0.01
CVE-2014-0056
OpenStack Neutron <2013.2.3 - Privilege Escalation
May 08, 2014
EPSS 0.01
CVE-2014-2260
Ajenti < 1.2.15 - Authenticated Stored Cross-Site Scripting via Cron Command Field
Apr 30, 2014
EPSS 0.01
CVE-2014-3007
Pillow < 2.5.0 - OS Command Injection in JpegImagePlugin
Apr 27, 2014
EPSS 0.12
CVE-2014-0162
OpenStack Glance <2013.2.4, <icehouse-rc2 - Command Injection
Apr 27, 2014
EPSS 0.02
CVE-2014-0474
Django <1.4.11-1.7 beta 2 - Info Disclosure
Apr 23, 2014
EPSS 0.05
CVE-2014-0473
Django <1.4.11, <1.5.6, <1.6.3, <1.7 beta 2 - CSRF Bypass
Apr 23, 2014
EPSS 0.02
CVE-2014-0472
Django <1.4.11, <1.5.6, <1.6.3, <1.7 beta 2 - RCE
Apr 23, 2014
EPSS 0.06
CVE-2014-1933
PIL/Pillow <2.3.1 - Info Disclosure
Apr 17, 2014
EPSS 0.00
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 pypdf 32 opencv-contrib-python 30 opencv-python 30 langflow 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV