High
CVE-2024-47821
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
CVE-2024-49750
The Snowflake Connector for Python stores sensitive data in logs
Medium
CVE-2024-48425
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due
Medium
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
Medium
CVE-2024-48426
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inva
High
CVE-2024-48423
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
High
ghsa-3vpc-4p9p-47hc
curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Medium
CVE-2024-48911
OpenCanary Executes Commands From Potentially Writable Config File
Medium
CVE-2024-6985
A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the vi
High
CVE-2024-47871
Gradio uses insecure communication between the FRP client and server
High
CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
Medium
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Medium
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
High
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Medium
CVE-2024-47869
Gradio performs a non-constant-time comparison when comparing hashes
Medium
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Low
CVE-2024-47168
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring
Medium
CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
Medium
CVE-2024-47164
Gradio's `is_in_or_equal` function may be bypassed
Medium
CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
High
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Low
ghsa-26jh-r8g2-6fpr
Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list
Medium
CVE-2024-7041
open-webui Insecure Direct Object Reference (IDOR) vulnerability
Medium
CVE-2024-47833
Taipy has a Session Cookie without Secure and HTTPOnly flags
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.