Hoch
CVE-2024-47871
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 1.999
Filter zurücksetzen
Hoch
CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
Mittel
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Mittel
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
Hoch
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Mittel
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Mittel
CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
Mittel
CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
Hoch
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Niedrig
CVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
Hoch
CVE-2024-46977
OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
Mittel
ghsa-vx3h-qwqw-r2wq
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
Hoch
CVE-2024-1728
Gradio allows users to access arbitrary files
Mittel
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Mittel
CVE-2024-8375
Reverb use after free vulnerability
Hoch
CVE-2024-45855
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using ‘fin
Hoch
CVE-2024-45854
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ
Hoch
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Hoch
CVE-2024-45852
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
Hoch
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a
Hoch
CVE-2024-45848
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’
Hoch
CVE-2024-45849
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Hoch
CVE-2024-45850
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Hoch
CVE-2024-45846
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.