Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
CVE-2022-2112High· 8.8CSV Injection in inventree
CSV Injection in inventree
CVE-2022-2111High· 8.8Unrestricted Attachment Upload
Unrestricted Attachment Upload
CVE-2022-29241High· 7.1Jupyter server Token bruteforcing
Jupyter server Token bruteforcing
CVE-2022-31313Critical· 9.8api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
CVE-2022-24840Critical· 9.1Path Traversal in django-s3file
Path Traversal in django-s3file
CVE-2022-29773Medium· 6.5Access control issue in AlekSIS-Core
Access control issue in AlekSIS-Core
CVE-2019-11842High· 7.5matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
CVE-2020-7938High· 8.8Plone Privilege Escallation
Plone Privilege Escallation
CVE-2022-29211Medium· 5.5Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
CVE-2020-15703Medium· 4.0aptdaemon Information Disclosure via Improper Input Validation in Transaction class
aptdaemon Information Disclosure via Improper Input Validation in Transaction class
CVE-2020-10755Medium· 6.5Openstack cinder Improper handling of ScaleIO backend credentials
Openstack cinder Improper handling of ScaleIO backend credentials
CVE-2022-29206Medium· 5.5Missing validation results in undefined behavior in `SparseTensorDenseAdd
Missing validation results in undefined behavior in `SparseTensorDenseAdd
CVE-2019-11340Medium· 5.9Matrix Sydent mishandles emails
Matrix Sydent mishandles emails
CVE-2019-13628Medium· 4.7wolfCrypt leaks cryptographic information via timing side channel
wolfCrypt leaks cryptographic information via timing side channel
CVE-2022-29201Medium· 5.5Missing validation results in undefined behavior in `QuantizedConv2D`
Missing validation results in undefined behavior in `QuantizedConv2D`
CVE-2022-29199Medium· 5.5Missing validation causes denial of service via `LoadAndRemapMatrix`
Missing validation causes denial of service via `LoadAndRemapMatrix`
CVE-2022-29198Medium· 5.5Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`
Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`
CVE-2022-29203Medium· 5.5Integer overflow in `SpaceToBatchND`
Integer overflow in `SpaceToBatchND`
CVE-2019-14322High· 7.5PoCPallets Werkzeug vulnerable to Path Traversal
Pallets Werkzeug vulnerable to Path Traversal
CVE-2022-29204Medium· 5.5Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
CVE-2022-29197Medium· 5.5Missing validation causes denial of service via `UnsortedSegmentJoin`
Missing validation causes denial of service via `UnsortedSegmentJoin`
CVE-2022-29210Medium· 5.5Heap buffer overflow due to incorrect hash function in TensorFlow
Heap buffer overflow due to incorrect hash function in TensorFlow
CVE-2022-29194Medium· 5.5Missing validation causes denial of service via `DeleteSessionTensor`
Missing validation causes denial of service via `DeleteSessionTensor`
CVE-2022-29195Medium· 5.5Missing validation causes denial of service via `StagePeek`
Missing validation causes denial of service via `StagePeek`
CVE-2022-29192Medium· 5.5Missing validation crashes `QuantizeAndDequantizeV4Grad`
Missing validation crashes `QuantizeAndDequantizeV4Grad`
CVE-2022-29191Medium· 5.5Missing validation causes denial of service via `GetSessionTensor`
Missing validation causes denial of service via `GetSessionTensor`
CVE-2019-13594High· 8.8Mirumee Saleor CSRF Protection Disabled
Mirumee Saleor CSRF Protection Disabled
CVE-2022-29209Medium· 5.5Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
CVE-2022-29202Medium· 5.5Denial of service in `tf.ragged.constant` due to lack of validation
Denial of service in `tf.ragged.constant` due to lack of validation
CVE-2019-6446Critical· 9.8PoCNumpy Deserialization of Untrusted Data
Numpy Deserialization of Untrusted Data