Feed live

python CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,399

All time

Critical · Active

12,013

CVSS ≥ 9.0

New · 14 days

2,205

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 151–180 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-20285	medium	5.3/10	Cisco NX-OS Software Python Parser Escape Vulnerability	Aug 28, 2024 1y ago
CVE-2024-20286	medium	5.3/10	Cisco NX-OS Software Python Parser Escape Vulnerability	Aug 28, 2024 1y ago
CVE-2024-7246	medium	6.3/10	HPACK table poisoning in gRPC C++, Python & Ruby	Aug 6, 2024 2y ago
CVE-2024-3219	medium	5.1/10	Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection	Jul 29, 2024 2y ago
CVE-2024-34359	critical	9.7/10	llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata	May 10, 2024 2y ago
CVE-2024-34072	high	7.8/10	Deserialization of Untrusted Data in sagemaker-python-sdk	May 3, 2024 2y ago
CVE-2024-34073	high	7.8/10	Command Injection in sagemaker-python-sdk	May 3, 2024 2y ago
CVE-2023-50204	high	8.8/10	D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-50202	high	8.8/10	D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability	May 3, 2024 2y ago
CVE-2023-50782	high	7.5/10	Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659	Feb 5, 2024 2y ago
CVE-2024-24762	high	7.5/10	python-multipart vulnerable to content-type header Regular expression Denial of Service	Feb 5, 2024 2y ago
CVE-2024-23829	medium	6.5/10	aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators	Jan 29, 2024 2y ago
CVE-2024-23342	high	7.4/10	python-ecdsa vulnerable to Minerva attack on P-256	Jan 22, 2024 2y ago
CVE-2024-21669	critical	9.9/10	Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC	Jan 11, 2024 2y ago
CVE-2020-17163	high	7.8/10	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Dec 29, 2023 2y ago
CVE-2023-7158	high	7.3/10	MicroPython objslice.c slice_indices heap-based overflow	Dec 29, 2023 2y ago
CVE-2023-7152	medium	5.5/10	MicroPython modselect.c poll_set_add_fd use after free	Dec 29, 2023 2y ago
CVE-2023-50423	critical	9.1/10	Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)	Dec 12, 2023 2y ago
CVE-2023-5625	medium	5.3/10	Python-eventlet: patch regression for cve-2021-21419 in some red hat builds	Nov 1, 2023 2y ago
CVE-2023-46666	medium	5.3/10	Elastic Sharepoint Online Python Connector Improper Access Control	Oct 26, 2023 2y ago
CVE-2023-4570	high	8.8/10	Improper Restriction in NI MeasurementLink Python Services	Oct 5, 2023 2y ago
CVE-2023-41050	medium	6.8/10	Information disclosure through Python's "format" functionality in Zope AccessControl	Sep 6, 2023 2y ago
CVE-2023-41040	medium	4.0/10	GitPython blind local file inclusion	Aug 30, 2023 2y ago
CVE-2023-41039	high	8.3/10	Sandbox escape via various forms of "format" in RestrictedPython	Aug 30, 2023 2y ago
CVE-2023-37274	high	7.6/10	Python code execution sandbox escape in non-docker version in Auto-GPT	Jul 13, 2023 3y ago
CVE-2023-37271	high	8.4/10	RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape	Jul 11, 2023 3y ago
CVE-2023-36830	medium	6.3/10	SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.	Jul 6, 2023 3y ago
CVE-2023-36814	high	7.5/10	zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module	Jul 3, 2023 3y ago
CVE-2023-36467	high	8.0/10	AWS data.all vulnerable to RCE through user injection of Python Commands	Jun 28, 2023 3y ago
CVE-2023-34233	high	7.3/10	Snowflake Python Connector vulnerable to Command Injection	Jun 8, 2023 3y ago