Media
CVE-2024-5629
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Alta
CVE-2024-37064
ydata unsafe deserialization
Alta
CVE-2024-37062
ydata unsafe deserialization
Alta
CVE-2024-4325
Server-Side Request Forgery in gradio
Media
CVE-2024-3095
Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
Baja
CVE-2024-35196
Slack integration leaks sensitive information in logs
Media
CVE-2024-3924
code injection vulnerability exists in the huggingface/text-generation-inference repository
Media
CVE-2024-4330
path traversal vulnerability was identified in the parisneo/lollms-webui
Media
CVE-2024-35228
Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
Media
CVE-2024-1727
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
Media
CVE-2024-35180
OMERO.web must check that the JSONP callback is a valid function
Baja
CVE-2024-32969
vantage6 collaboration admins can extend their influence by expanding the collaboration
Media
CVE-2024-35189
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Media
CVE-2022-4969
rockhopper Buffer Overflow vulnerability
Baja
CVE-2024-34715
Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Media
CVE-2024-36105
dbt allows Binding to an Unrestricted IP Address via socketsocket
Alta
CVE-2024-36110
ansibleguy-webui Cross-site Scripting vulnerability
Media
CVE-2024-28188
jupyter-scheduler's endpoint is missing authentication
Alta
CVE-2024-35061
NASA AIT-Core uses unencrypted channels to exchange data over the network
Alta
CVE-2024-34078
Arbitrary HTML present after sanitization because of unicode normalization
Alta
CVE-2024-34707
Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages
Alta
CVE-2024-4078
LoLLMS Command Injection vulnerability
Alta
CVE-2024-4264
litellm passes untrusted data to `eval` function without sanitization
Media
CVE-2024-35195
Requests `Session` object does not verify requests after making first request with verify=False
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.