python
262 tracked vulnerabilities.
CVE-2014-9365
CPython 2.x <2.7.9 & 3.x <3.4.3 - Man-in-the-Middle
Dec 12, 2014
EPSS 0.03
CVE-2014-2667
Python 3.2-3.5 - Race Condition in _get_masked_mode Function
Nov 16, 2014
EPSS 0.00
CVE-2014-1830
Requests <2.3.0 - Info Disclosure
Oct 15, 2014
EPSS 0.02
CVE-2014-1829
Requests <2.3.0 - Info Disclosure
Oct 15, 2014
EPSS 0.02
CVE-2014-7185
Python < 2.7.8 - Information Disclosure via Buffer Object Integer Overflow
Oct 08, 2014
EPSS 0.05
CVE-2014-3589
Debian Python-imaging < 2.3.1 - Improper Input Validation
Aug 25, 2014
EPSS 0.04
CVE-2014-0224
HIGH
SSL Labs API Client
Jun 05, 2014
CVSS 7.4
EPSS 0.95
CVE-2014-3007
Pillow < 2.5.0 - OS Command Injection in JpegImagePlugin
Apr 27, 2014
EPSS 0.12
CVE-2014-1933
PIL/Pillow <2.3.1 - Info Disclosure
Apr 17, 2014
EPSS 0.00
CVE-2014-1932
Pillow < 2.3.1 - Arbitrary File Write via Symlink Attack on Temporary Files
Apr 17, 2014
EPSS 0.00
CVE-2014-1912
Python <2.7.7, <3.3.4, <3.4rc1 - Buffer Overflow
Mar 01, 2014
EPSS 0.28
CVE-2014-1624
python-xdg 0.25 - Local Privilege Escalation
Jan 28, 2014
EPSS 0.00
CVE-2014-1604
RPLY < 0.7.1 - Cache Spoofing via Predictable Temporary File
Jan 28, 2014
EPSS 0.00
CVE-2013-1753
HIGH
Python 2.7.0-2.7.8 - Denial of Service via gzip_decode Function
Mar 11, 2020
CVSS 7.5
EPSS 0.04
CVE-2013-1895
HIGH
py-bcrypt < 0.3 - Authentication Bypass via Concurrent Memory Access
Jan 28, 2020
CVSS 7.5
EPSS 0.03
CVE-2013-7440
MEDIUM
CPython <2.7.9, <3.3.3 - SSL Spoofing
Jun 07, 2016
CVSS 5.9
EPSS 0.02
CVE-2013-7040
macOS X < 10.10.4 - Denial of Service via Predictable Hash Collisions
May 19, 2014
EPSS 0.03
CVE-2013-7338
Python - Denial of Service via Zip File Size Handling
Apr 22, 2014
EPSS 0.05
CVE-2013-0340
libexpat < 2.4.0 - XML External Entity Injection
Jan 21, 2014
EPSS 0.19
CVE-2013-2099
Python 3.2.x and 3.3.x - Denial of Service via SSL Certificate Common Name Wildcard Handling
Oct 09, 2013
EPSS 0.05
CVE-2013-4238
Canonical Ubuntu Linux - Improper Input Validation
Aug 18, 2013
EPSS 0.05
CVE-2013-1633
setuptools < 0.7 - Remote Code Execution via Untrusted HTTP Package Retrieval
Aug 06, 2013
EPSS 0.02
CVE-2012-5578
MEDIUM
Python keyring < 0.10 - Insecure Database File Permissions
Nov 25, 2019
CVSS 6.2
EPSS 0.00
CVE-2012-0877
HIGH
PyXML - Denial of Service via Hash Table Collisions
Nov 22, 2019
CVSS 7.5
EPSS 0.02
CVE-2012-5577
HIGH
Python keyring lib <0.10 - Info Disclosure
Oct 28, 2019
CVSS 7.5
EPSS 0.01
Products
python 139
pillow 65
urllib3 19
requests 6
setuptools 4
keyring 3
black 2
pyxdg 2
typed_ast 2
Protobuf 1
beaker 1
cpython 1
hpack 1
hyper 1
jw.util 1
novajoin 1
openpyxl 1
py-bcrypt 1
pybluemonday 1
pymanager 1
pypi 1
pypiserver 1
python-gnupg 1
python_priority_library 1
pyxml 1
rply 1
rsa 1
tablib 1
tgcaptcha2 1
tkvideoplayer 1
Quick Filters