Krytyczna
CVE-2024-50527
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
Krytyczna
CVE-2024-50525
Plug your WooCommerce into the largest catalog of customized print products from Helloprint <= 2.0.4 - Unauthenticated Arbitrary File Upload
Średnia
CVE-2024-50533
Domain Sharding <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Średnia
CVE-2024-9388
Black Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Krytyczna
CVE-2024-48063
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.
Średnia
CVE-2024-10491
Express ressource injection
Wysoka
CVE-2024-10108
WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode
Średnia
CVE-2024-10223
HT Team Member <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode
Średnia
CVE-2024-10399
Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure
Średnia
CVE-2024-8871
Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.5 - Reflected Cross-Site Scripting
Krytyczna
CVE-2024-6581
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this c
Średnia
CVE-2024-7774
Langchain Path Traversal vulnerability
Niska
CVE-2024-7042
@langchain/community SQL Injection vulnerability
Wysoka
CVE-2024-49769
Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion
Krytyczna
CVE-2024-49768
Waitress has request processing race condition in HTTP pipelining with invalid first request
Średnia
CVE-2024-8792
Subscribe to Comments <= 2.3 - Reflected Cross-Site Scripting
Średnia
CVE-2024-9885
Widget or Sidebar Shortcode <= 0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Średnia
CVE-2024-8627
Ultimate TinyMCE <= 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2024-9886
WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Wysoka
CVE-2024-9846
Enable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Średnia
CVE-2024-9884
T(-) Countdown <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Wysoka
CVE-2024-7807
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a m
Średnia
CVE-2024-8143
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a
Wysoka
CVE-2024-7962
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.