Crítica
CVE-2024-36265
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.999
Restablecer filtros
Media
CVE-2024-35225
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.
Media
CVE-2024-58384
Tornado has a CRLF injection in CurlAsyncHTTPClient headers
Media
CVE-2024-14029
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Media
CVE-2024-2965
Denial of service in langchain-community
Alta
CVE-2024-3408
Authentication bypass in dtale
Alta
CVE-2024-35178
Jupyter server on Windows discloses Windows user password hash
Crítica
CVE-2024-3829
qdrant input validation failure
Crítica
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Alta
CVE-2024-4321
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to impro
Media
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Alta
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Media
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Media
ghsa-w228-rfpx-fhm4
cg vulnerable to an Open Redirect Vulnerability on Referer Header
Media
CVE-2024-31869
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
Crítica
CVE-2024-3271
llama-index-core Command Injection vulnerability
Crítica
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
Alta
CVE-2024-1560
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1594
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1593
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1558
mlflow vulnerable to Path Traversal
Crítica
CVE-2024-2912
Insecure deserialization in BentoML
Alta
CVE-2024-1483
mlflow Path Traversal vulnerability
Alta
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.