VulnSea

Tagged “pip”

CVEs tagged pip, newest first.

5541 CVEsRSS

CVE-2022-2112High· 8.8
4y ago

CSV Injection in inventree

CSV Injection in inventree

▾ Twilightinventree · inventreeEPSS 1.3%via OSV
CVE-2022-2111High· 8.8
4y ago

Unrestricted Attachment Upload

Unrestricted Attachment Upload

▾ Twilightinventree · inventreeEPSS 1.3%via OSV
CVE-2022-29241High· 7.1
4y ago

Jupyter server Token bruteforcing

Jupyter server Token bruteforcing

▾ Twilightjupyter-server · jupyter-serverEPSS 0.99%via OSV
CVE-2022-31313Critical· 9.8
4y ago

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.

▾ Midnightapi-res-py · api-res-pyEPSS 1.9%via OSV
CVE-2022-24840Critical· 9.1
4y ago

Path Traversal in django-s3file

Path Traversal in django-s3file

▾ Midnightdjango-s3file · django-s3fileEPSS 2.1%via GHSA
CVE-2022-29773Medium· 6.5
4y ago

Access control issue in AlekSIS-Core

Access control issue in AlekSIS-Core

▾ Sunlitaleksis-core · aleksis-coreEPSS 0.73%via OSV
CVE-2019-11842High· 7.5
4y ago

matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

▾ Twilightmatrix-sydent · matrix-sydentEPSS 1.8%via OSV
CVE-2020-7938High· 8.8
4y ago

Plone Privilege Escallation

Plone Privilege Escallation

▾ Twilightplone-restapi · plone-restapiEPSS 1.5%via OSV
CVE-2022-29211Medium· 5.5
4y ago

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

▾ Sunlittensorflow · tensorflowEPSS 0.32%via OSV
CVE-2020-15703Medium· 4.0
4y ago

aptdaemon Information Disclosure via Improper Input Validation in Transaction class

aptdaemon Information Disclosure via Improper Input Validation in Transaction class

▾ Sunlitaptdaemon · aptdaemonEPSS 0.49%via OSV
CVE-2020-10755Medium· 6.5
4y ago

Openstack cinder Improper handling of ScaleIO backend credentials

Openstack cinder Improper handling of ScaleIO backend credentials

▾ Sunlitcinder · cinderEPSS 1.2%via OSV
CVE-2022-29206Medium· 5.5
4y ago

Missing validation results in undefined behavior in `SparseTensorDenseAdd

Missing validation results in undefined behavior in `SparseTensorDenseAdd

▾ Sunlittensorflow · tensorflowEPSS 0.36%via OSV
CVE-2019-11340Medium· 5.9
4y ago

Matrix Sydent mishandles emails

Matrix Sydent mishandles emails

▾ Sunlitmatrix-sydent · matrix-sydentEPSS 1.8%via OSV
CVE-2019-13628Medium· 4.7
4y ago

wolfCrypt leaks cryptographic information via timing side channel

wolfCrypt leaks cryptographic information via timing side channel

▾ Sunlitwolfcrypt · wolfcryptEPSS 0.38%via OSV
CVE-2022-29201Medium· 5.5
4y ago

Missing validation results in undefined behavior in `QuantizedConv2D`

Missing validation results in undefined behavior in `QuantizedConv2D`

▾ Sunlittensorflow · tensorflowEPSS 0.34%via OSV
CVE-2022-29199Medium· 5.5
4y ago

Missing validation causes denial of service via `LoadAndRemapMatrix`

Missing validation causes denial of service via `LoadAndRemapMatrix`

▾ Sunlittensorflow · tensorflowEPSS 0.33%via OSV
CVE-2022-29198Medium· 5.5
4y ago

Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

▾ Sunlittensorflow · tensorflowEPSS 0.33%via OSV
CVE-2022-29203Medium· 5.5
4y ago

Integer overflow in `SpaceToBatchND`

Integer overflow in `SpaceToBatchND`

▾ Sunlittensorflow · tensorflowEPSS 0.34%via OSV
CVE-2019-14322High· 7.5PoC
4y ago

Pallets Werkzeug vulnerable to Path Traversal

Pallets Werkzeug vulnerable to Path Traversal

▾ Midnightwerkzeug · werkzeugEPSS 56%via OSV
CVE-2022-29204Medium· 5.5
4y ago

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

▾ Sunlittensorflow · tensorflowEPSS 0.35%via OSV
CVE-2022-29197Medium· 5.5
4y ago

Missing validation causes denial of service via `UnsortedSegmentJoin`

Missing validation causes denial of service via `UnsortedSegmentJoin`

▾ Sunlittensorflow · tensorflowEPSS 0.33%via OSV
CVE-2022-29210Medium· 5.5
4y ago

Heap buffer overflow due to incorrect hash function in TensorFlow

Heap buffer overflow due to incorrect hash function in TensorFlow

▾ Sunlittensorflow · tensorflowEPSS 0.23%via OSV
CVE-2022-29194Medium· 5.5
4y ago

Missing validation causes denial of service via `DeleteSessionTensor`

Missing validation causes denial of service via `DeleteSessionTensor`

▾ Sunlittensorflow · tensorflowEPSS 0.33%via OSV
CVE-2022-29195Medium· 5.5
4y ago

Missing validation causes denial of service via `StagePeek`

Missing validation causes denial of service via `StagePeek`

▾ Sunlittensorflow · tensorflowEPSS 0.33%via OSV
CVE-2022-29192Medium· 5.5
4y ago

Missing validation crashes `QuantizeAndDequantizeV4Grad`

Missing validation crashes `QuantizeAndDequantizeV4Grad`

▾ Sunlittensorflow · tensorflowEPSS 0.35%via OSV
CVE-2022-29191Medium· 5.5
4y ago

Missing validation causes denial of service via `GetSessionTensor`

Missing validation causes denial of service via `GetSessionTensor`

▾ Sunlittensorflow · tensorflowEPSS 0.36%via OSV
CVE-2019-13594High· 8.8
4y ago

Mirumee Saleor CSRF Protection Disabled

Mirumee Saleor CSRF Protection Disabled

▾ Twilightsaleor · saleorEPSS 0.62%via OSV
CVE-2022-29209Medium· 5.5
4y ago

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

▾ Sunlittensorflow · tensorflowEPSS 0.40%via OSV
CVE-2022-29202Medium· 5.5
4y ago

Denial of service in `tf.ragged.constant` due to lack of validation

Denial of service in `tf.ragged.constant` due to lack of validation

▾ Sunlittensorflow · tensorflowEPSS 0.32%via OSV
CVE-2019-6446Critical· 9.8PoC
4y ago

Numpy Deserialization of Untrusted Data

Numpy Deserialization of Untrusted Data

▾ Abyssalnumpy · numpyEPSS 27%via OSV
CVEs tagged “pip” — page 160 · VulnSea