Średnia
CVE-2024-31580
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 335
Wyczyść filtry
Wysoka
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
Krytyczna
CVE-2024-3271
llama-index-core Command Injection vulnerability
Krytyczna
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
Wysoka
CVE-2024-1560
mlflow vulnerable to Path Traversal
Wysoka
CVE-2024-1593
mlflow vulnerable to Path Traversal
Wysoka
CVE-2024-1558
mlflow vulnerable to Path Traversal
Krytyczna
CVE-2024-2912
Insecure deserialization in BentoML
Wysoka
CVE-2024-2217
gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated ver
Wysoka
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Średnia
CVE-2024-30266
wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host r
Średnia
CVE-2024-27091
GeoNode: Stored XSS to full account takeover
Średnia
CVE-2024-29735
Apache Airflow Improper Preservation of Permissions vulnerability
Wysoka
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Niska
ghsa-cq96-9974-v8hm
Dynamic Variable Evaluation in qiskit-ibm-runtime
Krytyczna
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Średnia
CVE-2024-28237
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings
Niska
ghsa-879p-8gw4-mcpw
fgr Vulnerable to Insecure Default Variable Initialization
Średnia
CVE-2024-22204
Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The `config` function in `app
Średnia
CVE-2024-22417
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and
Wysoka
CVE-2024-28425
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code v
Średnia
CVE-2024-28746
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which t
Średnia
CVE-2024-27305
aiosmtpd vulnerable to SMTP smuggling
Wysoka
CVE-2024-27758
RPyC's missing security check results in code execution when using numpy.array on the server-side.
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.