Tagged “pip”
CVEs tagged pip, newest first.
4668 CVEsRSS
CVE-2018-25045Medium· 6.1Django REST framework XSS Vulnerability
Django REST framework XSS Vulnerability
CVE-2021-42343Critical· 9.8Workers for local Dask clusters mistakenly listened on public interfaces
Workers for local Dask clusters mistakenly listened on public interfaces
CVE-2022-31153Medium· 6.5OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
CVE-2021-37839Medium· 4.3Apache Superset allows authenticated users to access metadata they have no permission to
Apache Superset allows authenticated users to access metadata they have no permission to
CVE-2022-31116High· 7.5Incorrect handling of invalid surrogate pair characters
Incorrect handling of invalid surrogate pair characters
CVE-2022-31117Medium· 5.9Potential double free of buffer during string decoding
Potential double free of buffer during string decoding
CVE-2022-33146Medium· 6.1Open redirect in web2py
Open redirect in web2py
CVE-2022-31604Critical· 9.8Unsafe deserialisation in the PKI implementation scheme of NVFlare
Unsafe deserialisation in the PKI implementation scheme of NVFlare
CVE-2022-31605Critical· 9.8Unsafe yaml deserialization in NVFlare
Unsafe yaml deserialization in NVFlare
CVE-2021-46823Medium· 6.5Denial of Service in python-ldap
Denial of Service in python-ldap
CVE-2022-2112High· 8.8CSV Injection in inventree
CSV Injection in inventree
CVE-2022-2111High· 8.8Unrestricted Attachment Upload
Unrestricted Attachment Upload
CVE-2022-29241High· 7.1Jupyter server Token bruteforcing
Jupyter server Token bruteforcing
CVE-2022-31313Critical· 9.8api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
CVE-2022-29773Medium· 6.5Access control issue in AlekSIS-Core
Access control issue in AlekSIS-Core
CVE-2019-11842High· 7.5matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
CVE-2020-7938High· 8.8Plone Privilege Escallation
Plone Privilege Escallation
CVE-2022-29211Medium· 5.5Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
CVE-2020-15703Medium· 4.0aptdaemon Information Disclosure via Improper Input Validation in Transaction class
aptdaemon Information Disclosure via Improper Input Validation in Transaction class
CVE-2020-10755Medium· 6.5Openstack cinder Improper handling of ScaleIO backend credentials
Openstack cinder Improper handling of ScaleIO backend credentials
CVE-2022-29206Medium· 5.5Missing validation results in undefined behavior in `SparseTensorDenseAdd
Missing validation results in undefined behavior in `SparseTensorDenseAdd
CVE-2019-11340Medium· 5.9Matrix Sydent mishandles emails
Matrix Sydent mishandles emails
CVE-2019-13628Medium· 4.7wolfCrypt leaks cryptographic information via timing side channel
wolfCrypt leaks cryptographic information via timing side channel
CVE-2022-29201Medium· 5.5Missing validation results in undefined behavior in `QuantizedConv2D`
Missing validation results in undefined behavior in `QuantizedConv2D`
CVE-2022-29199Medium· 5.5Missing validation causes denial of service via `LoadAndRemapMatrix`
Missing validation causes denial of service via `LoadAndRemapMatrix`
CVE-2022-29198Medium· 5.5Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`
Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`
CVE-2022-29203Medium· 5.5Integer overflow in `SpaceToBatchND`
Integer overflow in `SpaceToBatchND`
CVE-2019-14322High· 7.5PoCPallets Werkzeug vulnerable to Path Traversal
Pallets Werkzeug vulnerable to Path Traversal
CVE-2022-29204Medium· 5.5Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
CVE-2022-29197Medium· 5.5Missing validation causes denial of service via `UnsortedSegmentJoin`
Missing validation causes denial of service via `UnsortedSegmentJoin`