Wysoka
CVE-2024-10572
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Wysoka
CVE-2024-10550
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
Wysoka
CVE-2024-10549
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
Krytyczna
CVE-2024-10553
H2O Deserialization of Untrusted Data Vulnerability
Krytyczna
CVE-2024-10190
Horovod Vulnerable to Command Injection
Średnia
CVE-2025-0191
A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filena
Średnia
CVE-2025-0188
A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the respon
Wysoka
CVE-2024-9216
An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the
Średnia
CVE-2024-9159
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availa
Średnia
CVE-2024-9107
A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags i
Krytyczna
CVE-2024-9053
vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints
Wysoka
CVE-2024-8613
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and
Średnia
CVE-2024-10955
A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's
Średnia
CVE-2024-10707
gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnera
Wysoka
CVE-2024-10650
An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although
Niska
CVE-2024-47552
Apache Seata Vulnerable to Deserialization of Untrusted Data
Niska
CVE-2024-54016
Apache Seata Vulnerable to Data Amplification
Wysoka
CVE-2025-22228
Spring Security Does Not Enforce Password Length
Średnia
CVE-2025-23719
ZhinaTwitterWidget <= 1.0 - Reflected Cross-Site Scripting
Średnia
CVE-2025-26541
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Reflected Cross-Site Scripting
Średnia
CVE-2025-23735
Infugrator <= 1.0.3 - Reflected Cross-Site Scripting
Średnia
CVE-2025-26874
MemberSpace <= 2.1.13 - Reflected Cross-Site Scripting
Średnia
CVE-2025-26537
GDPR Tools <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Średnia
CVE-2025-25134
Theme Demo Bar <= 1.6.3 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.