Kritisch
CVE-2024-3829
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 2.016
Filter zurücksetzen
Kritisch
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Hoch
CVE-2024-4321
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to impro
Mittel
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Hoch
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Mittel
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Mittel
ghsa-w228-rfpx-fhm4
cg vulnerable to an Open Redirect Vulnerability on Referer Header
Mittel
CVE-2024-31869
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
Kritisch
CVE-2024-3271
llama-index-core Command Injection vulnerability
Kritisch
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
Hoch
CVE-2024-1560
mlflow vulnerable to Path Traversal
Hoch
CVE-2024-1594
mlflow vulnerable to Path Traversal
Hoch
CVE-2024-1593
mlflow vulnerable to Path Traversal
Hoch
CVE-2024-1558
mlflow vulnerable to Path Traversal
Kritisch
CVE-2024-2912
Insecure deserialization in BentoML
Hoch
CVE-2024-1483
mlflow Path Traversal vulnerability
Hoch
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Kritisch
CVE-2024-28335
Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted
Hoch
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Niedrig
ghsa-cq96-9974-v8hm
Dynamic Variable Evaluation in qiskit-ibm-runtime
Kritisch
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Mittel
CVE-2024-28237
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings
Kritisch
CVE-2024-22203
Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and
Kritisch
CVE-2024-22205
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` met
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.