Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2024/05/01 3:15 a.m.14 views

PYSEC-2024-281

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

7.5CVSS5.8AI score0.00744EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2024/04/16 12:15 a.m.14 views

PYSEC-2024-288

Cross-site Scripting XSS - Stored in mindsdb/mindsdb...

6.1CVSS6.2AI score0.00371EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2024/04/16 12:15 a.m.14 views

PYSEC-2024-247

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The...

9.9CVSS7AI score0.37487EPSS
SaveExploits2References5Affected Software1
PyPA
PyPA
added 2024/03/14 7:15 p.m.14 views

PYSEC-2024-276

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.2AI score0.00566EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2023/12/21 10:15 a.m.14 views

PYSEC-2023-264

Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG.This Javascript can be executed on the client side of any of the user who looks at the tasks in the...

5.4CVSS6.2AI score0.01344EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2023/11/20 9:15 a.m.14 views

PYSEC-2023-240

Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 .Apache Submarine uses JAXRS to define REST endpoints. In order tohandle YAML requests using application/yaml content-type, it defines...

9.8CVSS7AI score0.99569EPSS
SaveExploits11References4Affected Software1
PyPA
PyPA
added 2023/10/23 4:15 p.m.14 views

PYSEC-2023-320

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

5.5CVSS6AI score0.0027EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2023/08/28 6:15 p.m.14 views

PYSEC-2023-161

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

7.8CVSS7.6AI score0.00465EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2023/06/29 9:15 p.m.14 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2022/11/07 3:15 p.m.14 views

PYSEC-2022-43082

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm is 0.1.0...

9.8CVSS7.6AI score0.00923EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2022/11/07 3:15 p.m.14 views

PYSEC-2022-43090

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0...

8.8CVSS7.6AI score0.00972EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2022/10/11 10:15 p.m.14 views

PYSEC-2022-43029

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS7AI score0.01219EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2022/09/19 4:15 p.m.14 views

PYSEC-2022-43092

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS7AI score0.01284EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2022/02/04 11:15 p.m.14 views

PYSEC-2022-79

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.9AI score0.00992EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2022/02/03 12:15 p.m.14 views

PYSEC-2022-111

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS6.8AI score0.00765EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/11/23 8:15 p.m.14 views

PYSEC-2021-850

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting XSS in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the...

5.4CVSS5.6AI score0.00583EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2021/11/23 12:15 a.m.14 views

PYSEC-2021-861

Connections initialized by the AWS IoT Device SDK v2 for Java versions prior to 1.3.3, Python versions prior to 1.5.18, C++ versions prior to 1.12.7 and Node.js versions prior to 1.5.1 did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities CA in...

8.8CVSS6.7AI score0.00398EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2021/09/08 11:15 a.m.14 views

PYSEC-2021-332

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Reques...

8.8CVSS7.2AI score0.00477EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.14 views

PYSEC-2021-267

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on thi...

5.5CVSS7.2AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.14 views

PYSEC-2021-202

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.SparseFillEmptyRows. This is because of missing...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2020/10/21 9:15 p.m.14 views

PYSEC-2020-295

In Tensorflow before version 2.4.0, an attacker can pass an invalid axis value to tf.quantization.quantizeanddequantize. This results in accessing a dimension outside the rank of the input tensor in the C++ kernel implementation. However, dimsize only does a DCHECK to validate the argument and th...

7.5CVSS6.8AI score0.00908EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2020/10/06 7:15 p.m.14 views

PYSEC-2020-158

In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a .data suffix and which are accompanied by a JSON file with the .meta suffix. This can lead to Information Disclosure and in some shared-hosting scenarios also to circumvention of...

4CVSS6.8AI score0.01873EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2020/02/04 3:15 a.m.14 views

PYSEC-2020-155

Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and...

6.8CVSS6.8AI score0.02643EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2020/02/03 12:15 p.m.14 views

PYSEC-2020-35

Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter. By passing a suitably crafted delimiter...

9.8CVSS7.9AI score0.65336EPSS
SaveExploits9References13Affected Software1
PyPA
PyPA
added 2020/01/14 8:15 p.m.14 views

PYSEC-2020-175

In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user at least more than the current one which have his "TempPath" resolving to a world...

7.8CVSS6.9AI score0.00695EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2019/04/10 8:29 p.m.14 views

PYSEC-2019-214

A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views...

4.8CVSS7.4AI score0.02656EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2018/12/20 3:29 p.m.14 views

PYSEC-2018-11

Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 contains a Cross ite Request Forgery CSRF vulnerability in API endpoint: /api/ that can result in Task metadata such as task name, id, parameter, etc. will be leake...

8.8CVSS6.8AI score0.00807EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2018/11/12 2:29 a.m.14 views

PYSEC-2018-155

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.executebytecode call that triggers computation.stack.values with '"stack": 100, 100, 0' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed...

8.8CVSS7.4AI score0.02926EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2018/09/20 8:29 p.m.14 views

PYSEC-2018-138

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...

6.5CVSS7AI score0.02146EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2018/07/13 10:29 p.m.14 views

PYSEC-2018-43

A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code...

7.8CVSS7.1AI score0.00592EPSS
SaveExploits0References15Affected Software1
PyPA
PyPA
added 2018/04/18 7:29 p.m.14 views

PYSEC-2018-75

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote...

9.3CVSS7.3AI score0.04193EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2018/02/18 3:29 a.m.14 views

PYSEC-2018-68

An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...

8.8CVSS7.1AI score0.01774EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2017/09/21 9:29 p.m.14 views

PYSEC-2017-152

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...

6.4CVSS6.6AI score0.0035EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2017/09/13 4:29 p.m.14 views

PYSEC-2017-147

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...

7.8CVSS8AI score0.00734EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2017/08/07 5:29 p.m.14 views

PYSEC-2017-148

Cross-site scripting XSS vulnerability in ZMI pages that use the managetabsmessage in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12...

6.1CVSS6.2AI score0.02055EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2016/04/08 3:59 p.m.14 views

PYSEC-2016-16

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests...

3.1CVSS7AI score0.03345EPSS
SaveExploits0References14Affected Software1
PyPA
PyPA
added 2014/09/30 2:55 p.m.14 views

PYSEC-2014-46

Cross-site scripting XSS vulnerability in widgettraversal.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01188EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/09/30 2:55 p.m.14 views

PYSEC-2014-29

The sandbox whitelisting function allowmodule.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing...

8.5CVSS7.7AI score0.01711EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/03/11 7:37 p.m.14 views

PYSEC-2014-57

typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL...

4.3CVSS6.9AI score0.01192EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/03/11 7:37 p.m.14 views

PYSEC-2014-53

Multiple unspecified vulnerabilities in 1 dataitems.py, 2 get.py, and 3 traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors...

6.5CVSS7AI score0.01257EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2014/03/11 7:37 p.m.14 views

PYSEC-2014-55

zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive...

5.8CVSS6.6AI score0.01192EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2011/10/10 10:55 a.m.14 views

PYSEC-2011-26

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

9.3CVSS7.7AI score0.78332EPSS
SaveExploits15References9Affected Software1
PyPA
PyPA
added 2009/02/02 7:30 p.m.14 views

PYSEC-2009-14

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

9.3CVSS6.4AI score0.07147EPSS
SaveExploits1References18Affected Software1
PyPA
PyPA
added 2006/09/29 7:7 p.m.14 views

PYSEC-2006-9

Withdrawn as duplicate of PYSEC-2005-5. Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."...

6.4CVSS6AI score0.01004EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/14 5:17 p.m.13 views

PYSEC-2026-3456

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

7.5CVSS5.3AI score0.00335EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.13 views

Code Index MCP is vulnerable to Uncontrolled Resource Consumption

A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the function issaferegexpattern of the component searchcodeadvanced. Executing a manipulation of the argument regex can lead to inefficient regular expression complexity. It is possible to launch the attack...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/13 3:35 p.m.13 views

hermes-agent has an Injection issue

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function sanitizeenvlines of the file hermescli/config.py. The manipulation results in injection. It is possible to launch the attack remotely. The attack requires a high level of...

6.3CVSS5.8AI score0.00266EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.13 views

hermes-agent has a sandbox issue

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function executecode of the file tools/codeexecutiontool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The...

7.5CVSS6.5AI score0.0038EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.13 views

Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)

Related advisoryThis advisory tracks a regression of the original Excel-preview XSS that was publicly disclosed and patched under GHSA-jwf8-pv5p-vhmc patched in v0.8.0. The same root cause — XLSX.utils.sheettohtml output rendered via @html excelHtml without DOMPurify — was reintroduced sometime...

5.4CVSS6.2AI score0.00209EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.13 views

mem0 server lacks authentication and authorization controls for its memory deletion API endpoint

The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint DELETE /memories. The endpoint allows unauthenticated users to delete memory records by specifying arbitrary user identifiers e.g., userid, runid, agentid in the request query parameters. A...

6.5CVSS6.2AI score0.00386EPSS
SaveExploits0References5Affected Software1
Total number of security vulnerabilities5000