Unrated
CVE-2024-31584
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
CVE-2024-1681
flask-cors vulnerable to log injection when the log level is set to debug
Medium
CVE-2024-31869
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
Medium
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (D
High
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
Critical
CVE-2024-3660
Keras code injection vulnerability
Critical
CVE-2024-3271
llama-index-core Command Injection vulnerability
Medium
CVE-2024-3575
Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb
Critical
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
High
CVE-2024-1560
mlflow vulnerable to Path Traversal
High
CVE-2024-1594
mlflow vulnerable to Path Traversal
High
CVE-2024-1593
mlflow vulnerable to Path Traversal
High
CVE-2024-1558
mlflow vulnerable to Path Traversal
Critical
CVE-2024-2912
Insecure deserialization in BentoML
Medium
CVE-2024-2260
A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authent
Critical
CVE-2024-2083
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI pat
High
CVE-2024-1483
mlflow Path Traversal vulnerability
Critical
CVE-2024-3098
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
High
CVE-2024-2217
gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated ver
High
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Medium
CVE-2024-30266
wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host r
Medium
CVE-2024-27091
GeoNode: Stored XSS to full account takeover
Critical
CVE-2024-28335
Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted
Medium
CVE-2024-29735
Apache Airflow Improper Preservation of Permissions vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.