pypi

5,097 tracked vulnerabilities.

CVE-2013-4314
pyOpenSSL < 0.13.1 - Certificate Subject Alternative Name Spoofing via Null Byte
Sep 30, 2013
EPSS 0.01
CVE-2013-5942
Graphite 0.9.5-0.9.10 - Remote Code Execution via Unsafe Pickle Deserialization
Sep 27, 2013
EPSS 0.02
CVE-2013-5093
Graphite 0.9.5-0.9.10 - Remote Code Execution via Unsafe Pickle Deserialization
Sep 27, 2013
EPSS 0.39
CVE-2013-4294
OpenStack Keystone 2012.2.x and < 2013.1.4 - Unauthenticated Access Restriction Bypass via Revoked PKI Token
Sep 23, 2013
EPSS 0.03
CVE-2013-2217
Suds 0.4 - Symlink Attack via Predictable Cache File in /tmp/suds/
Sep 23, 2013
EPSS 0.01
CVE-2013-1443
Django 1.4-1.4.8 1.5-1.5.4 1.6-1.6 beta 4 - Denial of Service via Long Password Hashing
Sep 23, 2013
EPSS 0.03
CVE-2013-4315
Django 1.4.x < 1.4.7, 1.5.x < 1.5.3, 1.6.x < 1.6 beta 3 - Directory Traversal via SSI Template Tag
Sep 16, 2013
EPSS 0.03
CVE-2013-4278
OpenStack Compute Folsom, Grizzly, Havana - Authenticated Arbitrary Flavor Boot via Flavor ID Guessing
Sep 16, 2013
EPSS 0.01
CVE-2013-4260
Ansible 1.2.x < 1.2.3 - Arbitrary File Overwrite via Symlink Attack on Retry File
Sep 16, 2013
EPSS 0.00
CVE-2013-4259
Ansible < 1.2.3 - Session Hijacking via Symlink Attack on ControlPersist Socket
Sep 16, 2013
EPSS 0.00
CVE-2013-4183
OpenStack Cinder 2013.1.1-2013.1.2 - Exposure of Sensitive Information via LVMVolumeDriver Snapshot Deletion
Sep 16, 2013
EPSS 0.00
CVE-2013-4202
OpenStack Cinder < 2013.1.3 - Denial of Service via XML Entity Expansion
Sep 16, 2013
EPSS 0.03
CVE-2013-4179
OpenStack Compute (Nova) < 2013.2 - Denial of Service via XML Entity Expansion
Sep 16, 2013
EPSS 0.03
CVE-2013-2256
OpenStack Nova < 2013.1.3 - Authenticated Information Disclosure via Flavor ID Guessing
Sep 16, 2013
EPSS 0.02
CVE-2013-4111
python-glanceclient < 0.10.0 - SSL Certificate Validation Bypass via Improper preverify_ok Handling
Aug 28, 2013
EPSS 0.01
CVE-2013-1909
Redhat Enterprise Mrg < 0.20 - Improper Input Validation
Aug 23, 2013
EPSS 0.02
CVE-2013-4155
OpenStack Swift < 1.9.1 - Authenticated Denial of Service via DELETE Request Timestamp Manipulation
Aug 20, 2013
EPSS 0.02
CVE-2013-2161
OpenStack Swift Folsom, Grizzly, Havana - XML Injection via Account Name
Aug 20, 2013
EPSS 0.02
CVE-2013-1888
pip < 1.3 - Arbitrary File Overwrite via Symlink Attack on Temporary Directory
Aug 17, 2013
EPSS 0.00
CVE-2013-2132
Mongodb < 2.5.1 - Denial of Service
Aug 15, 2013
EPSS 0.03
CVE-2013-1633
setuptools < 0.7 - Remote Code Execution via Untrusted HTTP Package Retrieval
Aug 06, 2013
EPSS 0.02
CVE-2013-1630
pyshop < 0.7.1 - Remote Code Execution via Unverified HTTP Package Download
Aug 06, 2013
EPSS 0.02
CVE-2013-1629
pip < 1.3 - Remote Code Execution via Man-in-the-Middle Package Tampering
Aug 06, 2013
EPSS 0.06
CVE-2013-2209
Review Board 1.6.x-1.6.16 and 1.7.x-1.7.9 - Cross-Site Scripting via Auto-Complete Widget
Jul 31, 2013
EPSS 0.02
CVE-2013-2096
OpenStack Compute (Nova) Folsom, Grizzly, and Havana - Denial of Service via QCOW2 Image Virtual Size
Jul 09, 2013
EPSS 0.00
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 pypdf 32 opencv-contrib-python 30 opencv-python 30 langflow 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV