Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

705

Newly disclosed

Feed last synced

8 hrs ago

Data freshness

Showing 121–150 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34073	high	7.8/10	Command Injection in sagemaker-python-sdk	May 3, 2024 2y ago
CVE-2023-50204	high	8.8/10	D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-50202	high	8.8/10	D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-50782	high	7.5/10	Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659	Feb 5, 2024 2y ago
CVE-2024-24762	high	7.5/10	python-multipart vulnerable to content-type header Regular expression Denial of Service	Feb 5, 2024 2y ago
CVE-2024-23829	medium	6.5/10	aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators	Jan 29, 2024 2y ago
CVE-2024-23342	high	7.4/10	python-ecdsa vulnerable to Minerva attack on P-256	Jan 22, 2024 2y ago
CVE-2024-21669	critical	9.9/10	Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC	Jan 11, 2024 2y ago
CVE-2020-17163	high	7.8/10	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Dec 29, 2023 2y ago
CVE-2023-7158	high	7.3/10	MicroPython objslice.c slice_indices heap-based overflow	Dec 29, 2023 2y ago
CVE-2023-7152	medium	5.5/10	MicroPython modselect.c poll_set_add_fd use after free	Dec 29, 2023 2y ago
CVE-2023-50423	critical	9.1/10	Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)	Dec 12, 2023 2y ago
CVE-2023-5625	medium	5.3/10	Python-eventlet: patch regression for cve-2021-21419 in some red hat builds	Nov 1, 2023 2y ago
CVE-2023-46666	medium	5.3/10	Elastic Sharepoint Online Python Connector Improper Access Control	Oct 26, 2023 2y ago
CVE-2023-4570	high	8.8/10	Improper Restriction in NI MeasurementLink Python Services	Oct 5, 2023 2y ago
CVE-2023-41050	medium	6.8/10	Information disclosure through Python's "format" functionality in Zope AccessControl	Sep 6, 2023 2y ago
CVE-2023-41040	medium	4.0/10	GitPython blind local file inclusion	Aug 30, 2023 2y ago
CVE-2023-41039	high	8.3/10	Sandbox escape via various forms of "format" in RestrictedPython	Aug 30, 2023 2y ago
CVE-2023-37274	high	7.6/10	Python code execution sandbox escape in non-docker version in Auto-GPT	Jul 13, 2023 2y ago
CVE-2023-37271	high	8.4/10	RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape	Jul 11, 2023 2y ago
CVE-2023-36830	medium	6.3/10	SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.	Jul 6, 2023 2y ago
CVE-2023-36814	high	7.5/10	zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module	Jul 3, 2023 2y ago
CVE-2023-36467	high	8.0/10	AWS data.all vulnerable to RCE through user injection of Python Commands	Jun 28, 2023 3y ago
CVE-2023-34233	high	7.3/10	Snowflake Python Connector vulnerable to Command Injection	Jun 8, 2023 3y ago
CVE-2023-25601	—	—	Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication	Apr 20, 2023 3y ago
CVE-2018-25082	medium	6.3/10	zwczou WeChat SDK Python to_xml xml external entity reference	Mar 21, 2023 3y ago
CVE-2023-26052	low	3.7/10	Saleor is vulnerable to unauthenticated information disclosure via Python exceptions	Mar 2, 2023 3y ago
CVE-2023-26051	medium	6.5/10	Saleor is vulnerable to staff-authenticated error message information disclosure vulnerability via Python exceptions	Mar 2, 2023 3y ago
CVE-2023-24816	medium	4.5/10	set_term_title command injection in ipython	Feb 10, 2023 3y ago
CVE-2022-45786	—	—	Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection	Feb 4, 2023 3y ago