Średnia
CVE-2025-0188
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 999
Wyczyść filtry
Średnia
CVE-2024-9159
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availa
Krytyczna
CVE-2024-9053
vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints
Średnia
CVE-2024-10955
A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's
Średnia
CVE-2024-10707
gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnera
Średnia
CVE-2025-29770
vLLM denial of service via outlines unbounded cache on disk
Średnia
CVE-2025-25302
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to t
Wysoka
CVE-2025-25301
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker m
Wysoka
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Niska
CVE-2025-24023
Flask-AppBuilder Observable Response Discrepancy
Nieoceniona
pysec-2025-6
Exfiltrates cookies to hardcoded IP address
Nieoceniona
pysec-2025-5
Exfiltrates user cookies to hardcoded server endpoint during normal operations
Nieoceniona
pysec-2025-3
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Nieoceniona
pysec-2025-4
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Wysoka
CVE-2024-8550
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server,
Krytyczna
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Średnia
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Wysoka
CVE-2024-37302
Synapse denial of service through media disk space consumption
Wysoka
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Wysoka
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Krytyczna
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Średnia
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Krytyczna
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Wysoka
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.