Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

706

Newly disclosed

Feed last synced

7 hrs ago

Data freshness

Showing 91–120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-5321	medium	5.3/10	aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation	May 29, 2025 1y ago
CVE-2025-5279	high	7.0/10	Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin	May 27, 2025 1y ago
CVE-2025-47942	medium	5.3/10	Learners on edX Platform can download python_lib.zip	May 21, 2025 1y ago
CVE-2025-46833	medium	4.6/10	Programs/P73_SimplePythonEncryption.py has weak cryptographic key	May 8, 2025 1y ago
CVE-2025-2733	medium	5.3/10	mannaandpoem OpenManus Prompt python_execute.py os command injection	Mar 25, 2025 1y ago
CVE-2025-0508	medium	5.9/10	MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk	Mar 20, 2025 1y ago
CVE-2025-26411	—	—	Authenticated Arbitrary Python File Upload via Plugin Manager	Feb 11, 2025 1y ago
CVE-2025-25183	low	2.6/10	vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache	Feb 7, 2025 1y ago
CVE-2025-24795	medium	4.4/10	The Snowflake Connector for Python uses insecure cache files permissions	Jan 29, 2025 1y ago
CVE-2025-24794	medium	6.7/10	The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache	Jan 29, 2025 1y ago
CVE-2025-24793	high	7.0/10	Snowflake Connector for Python has an SQL Injection in write_pandas	Jan 29, 2025 1y ago
CVE-2025-22153	high	7.9/10	try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter	Jan 23, 2025 1y ago
CVE-2024-12745	high	8.6/10	SQL Injection in the Amazon Redshift Python Connector affecting v2.1.4	Dec 24, 2024 1y ago
CVE-2024-55655	low	2.7/10	sigstore-python has insufficient validation of integration timestamp during verification	Dec 10, 2024 1y ago
CVE-2024-53981	high	7.5/10	python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary	Dec 2, 2024 1y ago
CVE-2024-53865	high	8.3/10	Python package "zhmcclient" has passwords in clear text in its HMC and API logs	Nov 29, 2024 1y ago
CVE-2024-4343	critical	9.8/10	Python Command Injection in imartinez/privategpt	Nov 14, 2024 1y ago
CVE-2024-49050	high	8.8/10	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Nov 12, 2024 1y ago
CVE-2024-49750	medium	5.5/10	Snowflake Connector for Python has sensitive data in logs	Oct 24, 2024 1y ago
CVE-2024-47532	high	8.7/10	RestrictedPython information leakage via `AttributeError.obj` and the `string` module	Sep 30, 2024 1y ago
CVE-2024-8948	medium	6.9/10	MicroPython objint.c mpz_as_bytes heap-based overflow	Sep 17, 2024 1y ago
CVE-2024-8947	medium	6.3/10	MicroPython objarray.c use after free	Sep 17, 2024 1y ago
CVE-2024-8946	medium	6.9/10	MicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow	Sep 17, 2024 1y ago
CVE-2024-20284	medium	5.3/10	Cisco NX-OS Software Python Parser Escape Vulnerability	Aug 28, 2024 1y ago
CVE-2024-20285	medium	5.3/10	Cisco NX-OS Software Python Parser Escape Vulnerability	Aug 28, 2024 1y ago
CVE-2024-20286	medium	5.3/10	Cisco NX-OS Software Python Parser Escape Vulnerability	Aug 28, 2024 1y ago
CVE-2024-7246	medium	6.3/10	HPACK table poisoning in gRPC C++, Python & Ruby	Aug 6, 2024 1y ago
CVE-2024-3219	medium	5.1/10	Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection	Jul 29, 2024 1y ago
CVE-2024-34359	critical	9.7/10	llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata	May 10, 2024 2y ago
CVE-2024-34072	high	7.8/10	Deserialization of Untrusted Data in sagemaker-python-sdk	May 3, 2024 2y ago