Niedrig
CVE-2024-21671
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.861
Filter zurücksetzen
Mittel
CVE-2024-21653
vantage6 has insecure SSH configuration for node and server containers
Hoch
CVE-2024-21649
vantage6 remote code execution vulnerability
Niedrig
CVE-2024-22193
vantage6 may create unencrypted tasks in encrypted collaboration
Kritisch
CVE-2024-22682
DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.
Mittel
CVE-2024-23829
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
Hoch
CVE-2024-23334
aiohttp is vulnerable to directory traversal
Kritisch
CVE-2024-0937
Deserialization of untrusted data in synthcity
Hoch
CVE-2024-0936
A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function load_from_file of the component PKL File Handler. The manipulation
Mittel
CVE-2023-51702
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
Hoch
CVE-2023-50943
Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enable_xcom_pickling=False" configuration setting r
Hoch
CVE-2023-50944
Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This vulnerability is considered low s
Mittel
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
Hoch
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Mittel
CVE-2024-23341
html injection vulnerability in the `tuitse_html` function.
Kritisch
CVE-2023-49657
Cross-site Scripting in Apache superset
Hoch
CVE-2024-23345
XSS potential in rendered Markdown fields (comments, description, notes, etc.)
Kritisch
CVE-2024-23752
Code execution in pandasai
Kritisch
CVE-2024-23751
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorS
Hoch
CVE-2024-23750
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
Kritisch
CVE-2024-23730
Unsafe yaml deserialization in llama-hub
Mittel
CVE-2024-23732
The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.
Kritisch
CVE-2024-23731
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
Niedrig
CVE-2024-23329
changedetection.io API endpoint is not secured with API token
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.