Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
CVE-2021-40325High· 7.5Cobbler before 3.3.0 allows authorization bypass for modification of settings.
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
CVE-2021-40323Critical· 9.8PoCCobbler before 3.3.0 allows log poisoning
Cobbler before 3.3.0 allows log poisoning
CVE-2021-40324High· 7.5Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
CVE-2021-39229High· 7.5Apprise vulnerable to regex injection with IFTTT Plugin
Apprise vulnerable to regex injection with IFTTT Plugin
CVE-2021-39214High· 8.1PoCLacking Protection against HTTP Request Smuggling in mitmproxy
Lacking Protection against HTTP Request Smuggling in mitmproxy
CVE-2021-24040High· 8.4PoCDeserialization of Untrusted Data in parlai
Deserialization of Untrusted Data in parlai
CVE-2021-32839High· 7.5StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
CVE-2021-32805High· 7.2Flask-AppBuilder Open Redirect vulnerability
Flask-AppBuilder Open Redirect vulnerability
CVE-2021-32838High· 7.5Regular Expression Denial of Service in flask-restx
Regular Expression Denial of Service in flask-restx
CVE-2021-39163Low· 3.1Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
CVE-2021-39164Low· 3.1Improper authorisation of members discloses room membership to non-members
Improper authorisation of members discloses room membership to non-members
CVE-2021-39160High· 8.8Code injection in nbgitpuller
Code injection in nbgitpuller
CVE-2021-39159Critical· 9.6remote code execution via git repo provider
remote code execution via git repo provider
CVE-2021-37689High· 7.8Null pointer dereference in TFLite MLIR optimizations
Null pointer dereference in TFLite MLIR optimizations
CVE-2021-37666High· 7.8Reference binding to nullptr in `RaggedTensorToVariant`
Reference binding to nullptr in `RaggedTensorToVariant`
CVE-2021-37688High· 7.8Null pointer dereference in TFLite
Null pointer dereference in TFLite
CVE-2021-37659High· 7.3Reference binding to nullptr and heap OOB in binary cwise ops
Reference binding to nullptr and heap OOB in binary cwise ops
CVE-2021-37648High· 7.8Incorrect validation of `SaveV2` inputs
Incorrect validation of `SaveV2` inputs
CVE-2021-37667High· 7.8Reference binding to nullptr in unicode encoding
Reference binding to nullptr in unicode encoding
CVE-2021-37669Medium· 5.5Crash in NMS ops caused by integer conversion to unsigned
Crash in NMS ops caused by integer conversion to unsigned
CVE-2021-37665High· 7.8Incomplete validation in MKL requantization
Incomplete validation in MKL requantization
CVE-2021-37676High· 7.8Reference binding to nullptr in shape inference
Reference binding to nullptr in shape inference
CVE-2021-37683Medium· 5.5FPE in TFLite division operations
FPE in TFLite division operations
CVE-2021-37678Critical· 9.3PoCArbitrary code execution due to YAML deserialization
Arbitrary code execution due to YAML deserialization
CVE-2021-37664High· 7.3Heap OOB in boosted trees
Heap OOB in boosted trees
CVE-2021-37671High· 7.8Reference binding to nullptr in map operations
Reference binding to nullptr in map operations
CVE-2021-37653Medium· 5.5Division by 0 in `ResourceGather`
Division by 0 in `ResourceGather`
CVE-2021-37677Medium· 5.5Missing validation in shape inference for `Dequantize`
Missing validation in shape inference for `Dequantize`
CVE-2021-37684Medium· 5.5FPE in TFLite pooling operations
FPE in TFLite pooling operations
CVE-2021-37686Medium· 5.5Infinite loop in TFLite
Infinite loop in TFLite