Średnia
CVE-2024-47166
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 2 016
Wyczyść filtry
Wysoka
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Niska
CVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
Wysoka
CVE-2024-46977
OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
Średnia
ghsa-vx3h-qwqw-r2wq
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
Wysoka
CVE-2024-1728
Gradio allows users to access arbitrary files
Średnia
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Średnia
CVE-2024-8375
Reverb use after free vulnerability
Wysoka
CVE-2024-45855
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using ‘fin
Wysoka
CVE-2024-45854
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ
Wysoka
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Wysoka
CVE-2024-45852
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
Wysoka
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a
Wysoka
CVE-2024-45848
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’
Wysoka
CVE-2024-45849
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Wysoka
CVE-2024-45850
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Wysoka
CVE-2024-45846
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT
Średnia
ghsa-rjc6-vm4h-85cg
Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs
Krytyczna
CVE-2024-39205
pyload-ng vulnerable to RCE with js2py sandbox escape
Wysoka
CVE-2024-24759
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Średnia
CVE-2024-45399
Indico has a Cross-Site-Scripting during account creation
Wysoka
ghsa-xm4r-5rj9-2pg3
gratient 0.5 contains credential harvesting code
Średnia
CVE-2024-41937
Apache Airflow Cross-site Scripting Vulnerability
Wysoka
CVE-2024-43406
LF Edge eKuiper has a SQL Injection in sqlKvStore
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.