Tagged “pip”
CVEs tagged pip, newest first.
4668 CVEsRSS
CVE-2023-23608Medium· 5.4Path traversal in spotipy
Path traversal in spotipy
CVE-2023-0434Medium· 5.4Improper Input Validation in pyload-ng
Improper Input Validation in pyload-ng
CVE-2022-47950Medium· 6.5OpenStack Swift XML external entities (XXE) Injection
OpenStack Swift XML external entities (XXE) Injection
CVE-2023-22298Medium· 6.1pgAdmin 4 Open Redirect vulnerability
pgAdmin 4 Open Redirect vulnerability
CVE-2022-43720Medium· 5.4Apache Superset vulnerable to Injection
Apache Superset vulnerable to Injection
CVE-2022-43721Medium· 5.4Apache Superset Open Redirect vulnerability
Apache Superset Open Redirect vulnerability
CVE-2022-41703Medium· 5.4Apache Superset's SQL Alchemy connector vulnerable to SQL Injection
Apache Superset's SQL Alchemy connector vulnerable to SQL Injection
CVE-2022-43717Medium· 5.4Apache Superset vulnerable to Cross-site Scripting
Apache Superset vulnerable to Cross-site Scripting
CVE-2022-45438Medium· 5.3Apache Superset has Improper Access Control
Apache Superset has Improper Access Control
CVE-2022-43718Medium· 5.4Apache Superset is vulnerable to Cross-Site Scripting (XSS)
Apache Superset is vulnerable to Cross-Site Scripting (XSS)
CVE-2022-43719High· 8.8Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints
Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints
CVE-2023-0227Medium· 6.5Pyload Insufficient Session Expiration vulnerability
Pyload Insufficient Session Expiration vulnerability
CVE-2022-4885High· 7.5sviehb/jefferson vulnerable to path traversal
sviehb/jefferson vulnerable to path traversal
CVE-2023-0055Medium· 5.3Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-0057Medium· 6.1pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
CVE-2019-25091Medium· 5.3nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
CVE-2022-4729Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
CVE-2022-4730Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
CVE-2021-4287Medium· 6.5binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
CVE-2022-4728Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
CVE-2022-40897High· 7.5pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
CVE-2022-38060High· 7.8OpenStack Kolla sudo privilege escalation vulnerability
OpenStack Kolla sudo privilege escalation vulnerability
CVE-2022-44940Critical· 9.1Patchelf out-of-bounds read
Patchelf out-of-bounds read
CVE-2022-4589Medium· 6.1Terms and Conditions Module vulnerable to Open Redirect
Terms and Conditions Module vulnerable to Open Redirect
CVE-2022-4223High· 8.8PoCpgadmin4 vulnerable to Code Injection
pgadmin4 vulnerable to Code Injection
CVE-2022-4396Medium· 5.4pyRdfa3 Cross-site Scripting vulnerability
pyRdfa3 Cross-site Scripting vulnerability
CVE-2022-46742Critical· 9.8PaddlePaddle vulnerable to Code Injection
PaddlePaddle vulnerable to Code Injection
CVE-2022-46741Critical· 9.1PaddlePaddle Out-of-bounds Read vulnerability
PaddlePaddle Out-of-bounds Read vulnerability
CVE-2022-45908Critical· 9.8PaddlePaddle vulnerable to code injection via winstr
PaddlePaddle vulnerable to code injection via winstr
CVE-2022-41131High· 7.8OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow