Browse CVEs

CRITICAL 9.8 CVE-2022-34500 The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party. Pypi after 0.1 Fix from $2,3002022-07-22 CRITICAL 9.8 CVE-2022-34501 The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party. Pypi after 0.1 Fix from $2,3002022-07-22 CRITICAL 9.8 CVE-2022-32997 The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerabili… Rootinteractive 0.0.19+ Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-32998 The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vu… Cryptoasset Data Downloader after 1.0.1 Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-32999 The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attac… Cloudlabeling No fix yet Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-33000 The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allow… Ml Scanner after 0.1.5 Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-33001 The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers t… Aamiles No fix yet Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-33002 The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows… Explore after 0.1.2 Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-33003 The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows a… Watools after 0.0.8 Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-33004 The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows … Beginner after 0.0.4 Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-34053 The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows att… Dr Web Engine No fix yet Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-34054 The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows a… Perdido after 0.0.2 Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-34055 The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers … Drxhello No fix yet Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-34056 The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attacker… Watertools No fix yet Fix from $2,3002022-06-24 CRITICAL 9.8 CVE-2022-32996 The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability… Django Navbar Client after 1.0.1 Fix from $2,3002022-06-24 HIGH 7.8 CVE-2020-15904 A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted … Bsdiff4 1.2.0+ Fix from $1,9502020-07-22