Crítica
CVE-2024-36264
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.335
Restablecer filtros
Crítica
CVE-2024-4315
parisneo/lollms Local File Inclusion (LFI) attack
Media
CVE-2024-35225
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.
Media
CVE-2024-58384
Tornado has a CRLF injection in CurlAsyncHTTPClient headers
Media
CVE-2024-14029
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Alta
CVE-2024-4881
A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 5.9.0. The vulnerability arises due to improper
Media
CVE-2024-2965
Denial of service in langchain-community
Alta
CVE-2024-2928
A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure t
Media
CVE-2024-2383
A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. T
Alta
CVE-2024-0520
A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.h
Media
CVE-2024-5206
scikit-learn sensitive data leakage vulnerability
Alta
CVE-2024-3408
Authentication bypass in dtale
Crítica
CVE-2024-5452
Remote code execution in pytorch lightning
Alta
CVE-2024-4941
A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the `postprocess()` function within `gra
Alta
CVE-2024-35178
Jupyter server on Windows discloses Windows user password hash
Alta
ghsa-hvh4-5qr6-3v7r
Observable Timing Discrepancy in pypqc
Baja
ghsa-4m3g-6r7g-jv4f
Arbitrary JavaScript execution due to using outdated libraries
Alta
CVE-2024-37058
MLFlow unsafe deserialization
Crítica
CVE-2024-3829
qdrant input validation failure
Media
CVE-2024-36112
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail UI
Crítica
CVE-2024-35374
Mocodo vulnerable to SQL injection in `/web/generate.php`
Alta
CVE-2024-26139
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionalit
Crítica
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Alta
CVE-2024-4181
RunGptLLM class in LlamaIndex has a command injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.