Media
CVE-2024-31580
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.335
Restablecer filtros
Alta
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
Crítica
CVE-2024-3271
llama-index-core Command Injection vulnerability
Crítica
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
Alta
CVE-2024-1560
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1593
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1558
mlflow vulnerable to Path Traversal
Crítica
CVE-2024-2912
Insecure deserialization in BentoML
Alta
CVE-2024-2217
gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated ver
Alta
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Media
CVE-2024-30266
wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host r
Media
CVE-2024-27091
GeoNode: Stored XSS to full account takeover
Media
CVE-2024-29735
Apache Airflow Improper Preservation of Permissions vulnerability
Alta
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Baja
ghsa-cq96-9974-v8hm
Dynamic Variable Evaluation in qiskit-ibm-runtime
Crítica
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Media
CVE-2024-28237
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings
Baja
ghsa-879p-8gw4-mcpw
fgr Vulnerable to Insecure Default Variable Initialization
Media
CVE-2024-22204
Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The `config` function in `app
Media
CVE-2024-22417
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and
Alta
CVE-2024-28425
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code v
Media
CVE-2024-28746
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which t
Media
CVE-2024-27305
aiosmtpd vulnerable to SMTP smuggling
Alta
CVE-2024-27758
RPyC's missing security check results in code execution when using numpy.array on the server-side.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.