Kritisch
CVE-2024-49768
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.861
Filter zurücksetzen
Hoch
CVE-2024-7807
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a m
Mittel
CVE-2024-8143
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a
Hoch
CVE-2024-7962
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches
Mittel
CVE-2024-49771
MPXJ has a Potential Path Traversal Vulnerability
Hoch
CVE-2024-10455
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block
Hoch
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Mittel
CVE-2024-49750
The Snowflake Connector for Python stores sensitive data in logs
Mittel
CVE-2024-48425
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due
Mittel
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
Mittel
CVE-2024-48426
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inva
Hoch
CVE-2024-48423
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
Hoch
ghsa-3vpc-4p9p-47hc
curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Mittel
CVE-2024-48911
OpenCanary Executes Commands From Potentially Writable Config File
Mittel
CVE-2024-6985
A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the vi
Hoch
CVE-2024-47871
Gradio uses insecure communication between the FRP client and server
Hoch
CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
Mittel
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Mittel
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
Hoch
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Mittel
CVE-2024-47869
Gradio performs a non-constant-time comparison when comparing hashes
Mittel
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Niedrig
CVE-2024-47168
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring
Mittel
CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.