High
CVE-2024-47871
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,999
Reset filters
High
CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
Medium
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Medium
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
High
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Medium
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Medium
CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
Medium
CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
High
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Low
CVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
High
CVE-2024-46977
OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
Medium
ghsa-vx3h-qwqw-r2wq
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
High
CVE-2024-1728
Gradio allows users to access arbitrary files
Medium
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Medium
CVE-2024-8375
Reverb use after free vulnerability
High
CVE-2024-45855
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using ‘fin
High
CVE-2024-45854
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ
High
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
High
CVE-2024-45852
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
High
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a
High
CVE-2024-45848
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’
High
CVE-2024-45849
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
High
CVE-2024-45850
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
High
CVE-2024-45846
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.