High
CVE-2024-37057
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2024-37058
MLFlow unsafe deserialization
High
CVE-2024-37060
MLFlow unsafe deserialization
High
CVE-2024-37054
MLFlow unsafe deserialization
High
CVE-2024-37052
MLFlow unsafe deserialization
High
CVE-2024-37055
MLFlow unsafe deserialization
High
CVE-2024-37056
MLFlow unsafe deserialization
High
CVE-2024-37053
MLFlow unsafe deserialization
Critical
CVE-2024-4253
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
Critical
CVE-2024-3829
qdrant input validation failure
High
CVE-2024-5565
Vanna prompt injection code execution
Medium
CVE-2024-36112
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail UI
Critical
CVE-2024-35374
Mocodo vulnerable to SQL injection in `/web/generate.php`
High
CVE-2024-26139
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionalit
Critical
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
High
CVE-2024-4181
RunGptLLM class in LlamaIndex has a command injection
Medium
CVE-2024-4263
A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises
High
CVE-2024-3848
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of ar
High
CVE-2024-4321
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to impro
Medium
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Medium
ghsa-jm3v-qxmh-hxwv
Scrapy's redirects ignoring scheme-specific proxy settings
Medium
CVE-2024-1968
In scrapy/scrapy, an issue was identified where the Authorization header is not removed during redirects that only change the scheme (e.g., HTTPS to HTTP) but remain within the same domain. This behav
Critical
CVE-2024-32977
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely
Medium
CVE-2024-32077
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.