Wysoka
CVE-2024-47821
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 855
Wyczyść filtry
Średnia
CVE-2024-49750
The Snowflake Connector for Python stores sensitive data in logs
Średnia
CVE-2024-48425
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due
Średnia
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
Średnia
CVE-2024-48426
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inva
Wysoka
CVE-2024-48423
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
Wysoka
ghsa-3vpc-4p9p-47hc
curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Średnia
CVE-2024-48911
OpenCanary Executes Commands From Potentially Writable Config File
Średnia
CVE-2024-6985
A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the vi
Wysoka
CVE-2024-47871
Gradio uses insecure communication between the FRP client and server
Wysoka
CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
Średnia
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Średnia
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
Wysoka
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Średnia
CVE-2024-47869
Gradio performs a non-constant-time comparison when comparing hashes
Średnia
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Niska
CVE-2024-47168
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring
Średnia
CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
Średnia
CVE-2024-47164
Gradio's `is_in_or_equal` function may be bypassed
Średnia
CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
Wysoka
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Niska
ghsa-26jh-r8g2-6fpr
Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list
Średnia
CVE-2024-7041
open-webui Insecure Direct Object Reference (IDOR) vulnerability
Średnia
CVE-2024-47833
Taipy has a Session Cookie without Secure and HTTPOnly flags
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.