Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2024-5023Critical· 9.6ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
CVE-2024-4078Critical· 9.8LoLLMS Command Injection vulnerability
LoLLMS Command Injection vulnerability
CVE-2024-4181High· 8.8RunGptLLM class in LlamaIndex has a command injection
RunGptLLM class in LlamaIndex has a command injection
CVE-2024-34359Critical· 9.6llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
CVE-2024-34707High· 7.5Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages
Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages
CVE-2024-32874Critical· 9.3Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
CVE-2024-28148Medium· 4.3Apache Superset Incorrect Authorization vulnerability
Apache Superset Incorrect Authorization vulnerability
CVE-2024-34078HighArbitrary HTML present after sanitization because of unicode normalization
Arbitrary HTML present after sanitization because of unicode normalization
CVE-2024-34064Medium· 5.4PoCJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
CVE-2024-32982High· 8.2Litestar and Starlite vulnerable to Path Traversal
Litestar and Starlite vulnerable to Path Traversal
CVE-2024-34069High· 7.5PoCWerkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
CVE-2024-34487MediumRyu Infinite Loop vulnerability
Ryu Infinite Loop vulnerability
CVE-2024-34486High· 7.5Ryu Infinite Loop vulnerability
Ryu Infinite Loop vulnerability
CVE-2024-34488High· 7.5Ryu Infinite Loop vulnerability
Ryu Infinite Loop vulnerability
CVE-2024-34484MediumRyu Infinite Loop vulnerability
Ryu Infinite Loop vulnerability
CVE-2024-34483High· 7.5Ryu Infinite Loop vulnerability
Ryu Infinite Loop vulnerability
CVE-2024-34489High· 7.5Ryu Infinite Loop vulnerability
Ryu Infinite Loop vulnerability
CVE-2024-34511Medium· 6.5Gradio's Component Server does not properly consider` _is_server_fn` for functions
Gradio's Component Server does not properly consider` _is_server_fn` for functions
CVE-2024-34072High· 7.8sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
CVE-2024-34061Medium· 4.3PoCchangedetection.io Cross-site Scripting vulnerability
changedetection.io Cross-site Scripting vulnerability
CVE-2024-34062Low· 3.9tqdm CLI arguments injection attack
tqdm CLI arguments injection attack
CVE-2024-34073High· 7.8sagemaker-python-sdk Command Injection vulnerability
sagemaker-python-sdk Command Injection vulnerability
CVE-2024-30251High· 7.5aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
CVE-2024-3955Critical· 9.8CraftBeerPi 4 allows arbitrary code execution
CraftBeerPi 4 allows arbitrary code execution
CVE-2024-4216High· 7.4pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
CVE-2024-4215High· 7.4pgAdmin is affected by a multi-factor authentication bypass vulnerability
pgAdmin is affected by a multi-factor authentication bypass vulnerability
CVE-2024-32882Low· 2.7Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`
Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`
CVE-2024-32979High· 7.5nautobot has reflected Cross-site Scripting potential in all object list views
nautobot has reflected Cross-site Scripting potential in all object list views
CVE-2023-46960High· 8.6PyPXE Buffer Overflow vulnerability
PyPXE Buffer Overflow vulnerability
CVE-2023-1000Medium· 6.3dcnnt-py is vulnerable to command injection via Notification Handler
dcnnt-py is vulnerable to command injection via Notification Handler