Hoch
CVE-2024-37057
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.855
Filter zurücksetzen
Hoch
CVE-2024-37058
MLFlow unsafe deserialization
Hoch
CVE-2024-37060
MLFlow unsafe deserialization
Hoch
CVE-2024-37054
MLFlow unsafe deserialization
Hoch
CVE-2024-37052
MLFlow unsafe deserialization
Hoch
CVE-2024-37055
MLFlow unsafe deserialization
Hoch
CVE-2024-37056
MLFlow unsafe deserialization
Hoch
CVE-2024-37053
MLFlow unsafe deserialization
Kritisch
CVE-2024-4253
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
Kritisch
CVE-2024-3829
qdrant input validation failure
Hoch
CVE-2024-5565
Vanna prompt injection code execution
Mittel
CVE-2024-36112
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail UI
Kritisch
CVE-2024-35374
Mocodo vulnerable to SQL injection in `/web/generate.php`
Hoch
CVE-2024-26139
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionalit
Kritisch
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Hoch
CVE-2024-4181
RunGptLLM class in LlamaIndex has a command injection
Mittel
CVE-2024-4263
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises
Hoch
CVE-2024-3848
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of ar
Hoch
CVE-2024-4321
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to impro
Mittel
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Mittel
ghsa-jm3v-qxmh-hxwv
Scrapy's redirects ignoring scheme-specific proxy settings
Mittel
CVE-2024-1968
In scrapy/scrapy, an issue was identified where the Authorization header is not removed during redirects that only change the scheme (e.g., HTTPS to HTTP) but remain within the same domain. This behav
Kritisch
CVE-2024-32977
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely
Mittel
CVE-2024-32077
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.