Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2025/03/20 10:15 a.m.14 views

PYSEC-2025-95

A stored cross-site scripting XSS vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags in chat history uploads. Specifically, the sanitization logic fails to handle HTML tags within code...

6.8CVSS6.8AI score0.00522EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2025/03/20 10:15 a.m.14 views

PYSEC-2025-83

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint...

7.5CVSS7.2AI score0.01221EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2025/03/20 10:15 a.m.14 views

PYSEC-2025-80

A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint /api/file does not properly sanitize the path parameter, allowing an attacker to read arbitrary files on the server...

7.5CVSS7.2AI score0.00713EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2025/03/20 10:15 a.m.14 views

PYSEC-2025-144

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS7.1AI score0.00593EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2025/03/20 10:15 a.m.14 views

PYSEC-2025-92

An unauthenticated Denial of Service DoS vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for CVE-2024-7807, the issue can still be exploited by sending data in groups...

7.5CVSS7.1AI score0.0067EPSS
SaveExploits2References1Affected Software1
PyPA
PyPA
added 2025/03/17 8:15 a.m.14 views

PYSEC-2025-227

A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::anonymous namespace::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to...

8.8CVSS6.4AI score0.00534EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2025/03/10 2:15 p.m.15 views

PYSEC-2025-159

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The...

9.8CVSS6.8AI score0.0052EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2025/01/23 1:15 a.m.14 views

PYSEC-2025-129

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...

6.5CVSS5.7AI score0.00342EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2024/11/28 5:15 p.m.14 views

PYSEC-2024-161

Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources for example, user-supplied input files. This...

9.8CVSS7.7AI score0.02322EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2024/09/25 6:15 p.m.14 views

PYSEC-2024-171

Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable ...

8CVSS7AI score0.0023EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2024/07/10 11:15 p.m.14 views

PYSEC-2024-269

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...

9.1CVSS7.1AI score0.10936EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2024/06/06 7:15 p.m.14 views

PYSEC-2024-105

A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same username when requests are sent in parallel. This issue was fixed in version 0.55.5. The vulnerability arises due to insufficient handling of...

3.1CVSS6.7AI score0.00291EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2024/05/16 9:15 a.m.14 views

PYSEC-2024-267

A Local File Inclusion LFI vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the chat history upload process. An attacker c...

7.5CVSS7.3AI score0.00597EPSS
SaveExploits2References1Affected Software1
PyPA
PyPA
added 2024/05/16 9:15 a.m.14 views

PYSEC-2024-51

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing...

5.4CVSS6.7AI score0.00332EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2024/05/06 12:15 a.m.14 views

PYSEC-2024-185

Nebari through 2024.4.1 prints the temporary Keycloak root password...

4.8CVSS7AI score0.00353EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2024/05/03 5:15 p.m.14 views

PYSEC-2024-280

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

3.9CVSS5.8AI score0.00238EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2024/05/01 3:15 a.m.14 views

PYSEC-2024-281

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

7.5CVSS5.8AI score0.00744EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2024/04/16 12:15 a.m.14 views

PYSEC-2024-288

Cross-site Scripting XSS - Stored in mindsdb/mindsdb...

6.1CVSS6.2AI score0.00371EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2024/04/16 12:15 a.m.14 views

PYSEC-2024-247

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The...

9.9CVSS7AI score0.37487EPSS
SaveExploits2References5Affected Software1
PyPA
PyPA
added 2024/03/14 7:15 p.m.14 views

PYSEC-2024-276

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.2AI score0.00566EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2023/12/21 10:15 a.m.14 views

PYSEC-2023-264

Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG.This Javascript can be executed on the client side of any of the user who looks at the tasks in the...

5.4CVSS6.2AI score0.01344EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2023/11/20 9:15 a.m.14 views

PYSEC-2023-240

Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 .Apache Submarine uses JAXRS to define REST endpoints. In order tohandle YAML requests using application/yaml content-type, it defines...

9.8CVSS7AI score0.99569EPSS
SaveExploits11References4Affected Software1
PyPA
PyPA
added 2023/08/28 6:15 p.m.14 views

PYSEC-2023-161

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

7.8CVSS7.6AI score0.00465EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2023/06/29 9:15 p.m.14 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2022/11/07 3:15 p.m.14 views

PYSEC-2022-43082

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.6AI score0.00923EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2022/11/07 3:15 p.m.14 views

PYSEC-2022-43090

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0...

8.8CVSS7.6AI score0.00972EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2022/10/11 10:15 p.m.14 views

PYSEC-2022-43029

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS7AI score0.01219EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2022/09/19 4:15 p.m.14 views

PYSEC-2022-43092

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS7AI score0.01284EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2022/02/04 11:15 p.m.14 views

PYSEC-2022-79

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.9AI score0.00992EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2022/02/03 12:15 p.m.14 views

PYSEC-2022-111

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS6.8AI score0.00765EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/11/23 8:15 p.m.14 views

PYSEC-2021-850

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...

5.4CVSS5.6AI score0.00583EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2021/11/23 12:15 a.m.14 views

PYSEC-2021-861

Connections initialized by the AWS IoT Device SDK v2 for Java versions prior to 1.3.3, Python versions prior to 1.5.18, C++ versions prior to 1.12.7 and Node.js versions prior to 1.5.1 did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities CA in...

8.8CVSS6.7AI score0.00398EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2021/09/08 11:15 a.m.14 views

PYSEC-2021-332

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS7.2AI score0.00477EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.14 views

PYSEC-2021-267

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on thi...

5.5CVSS7.2AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.14 views

PYSEC-2021-202

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.SparseFillEmptyRows. This is because of missing...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2020/10/21 9:15 p.m.14 views

PYSEC-2020-295

In Tensorflow before version 2.4.0, an attacker can pass an invalid axis value to tf.quantization.quantizeanddequantize. This results in accessing a dimension outside the rank of the input tensor in the C++ kernel implementation. However, dimsize only does a DCHECK to validate the argument and th...

7.5CVSS6.8AI score0.00908EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2020/10/06 7:15 p.m.14 views

PYSEC-2020-158

In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a .data suffix and which are accompanied by a JSON file with the .meta suffix. This can lead to Information Disclosure and in some shared-hosting scenarios also to circumvention of...

4CVSS6.8AI score0.01873EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2020/02/04 3:15 a.m.14 views

PYSEC-2020-155

Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and...

6.8CVSS6.8AI score0.02643EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2020/02/03 12:15 p.m.14 views

PYSEC-2020-35

Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter. By passing a suitably crafted delimiter...

9.8CVSS7.9AI score0.65336EPSS
SaveExploits9References13Affected Software1
PyPA
PyPA
added 2020/01/14 8:15 p.m.14 views

PYSEC-2020-175

In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user at least more than the current one which have his "TempPath" resolving to a world...

7.8CVSS6.9AI score0.00695EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2019/04/10 8:29 p.m.14 views

PYSEC-2019-214

A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views...

4.8CVSS7.4AI score0.02656EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2018/12/20 3:29 p.m.14 views

PYSEC-2018-11

Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 contains a Cross ite Request Forgery CSRF vulnerability in API endpoint: /api/ that can result in Task metadata such as task name, id, parameter, etc. will be leake...

8.8CVSS6.8AI score0.00807EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2018/11/12 2:29 a.m.14 views

PYSEC-2018-155

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

8.8CVSS7.4AI score0.02926EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2018/09/20 8:29 p.m.14 views

PYSEC-2018-138

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...

6.5CVSS7AI score0.02146EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2018/07/13 10:29 p.m.14 views

PYSEC-2018-43

A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code...

7.8CVSS7.1AI score0.00592EPSS
SaveExploits0References15Affected Software1
PyPA
PyPA
added 2018/04/18 7:29 p.m.14 views

PYSEC-2018-75

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote...

9.3CVSS7.3AI score0.04193EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2018/02/18 3:29 a.m.14 views

PYSEC-2018-68

An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...

8.8CVSS7.1AI score0.01774EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2017/09/21 9:29 p.m.14 views

PYSEC-2017-152

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...

6.4CVSS6.6AI score0.0035EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2017/09/13 4:29 p.m.14 views

PYSEC-2017-147

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...

7.8CVSS8AI score0.00734EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2017/08/07 5:29 p.m.14 views

PYSEC-2017-148

Cross-site scripting XSS vulnerability in ZMI pages that use the managetabsmessage in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12...

6.1CVSS6.2AI score0.02055EPSS
SaveExploits0References9Affected Software1
Total number of security vulnerabilities5000