VulnSea

Tagged “ghsa”

CVEs tagged ghsa, newest first.

5757 CVEsRSS

CVE-2024-3955Critical· 9.8
2y ago

CraftBeerPi 4 allows arbitrary code execution

CraftBeerPi 4 allows arbitrary code execution

▾ Midnightcbpi4 · cbpi4EPSS 1.1%via OSV
CVE-2024-2912Critical· 9.8
2y ago

Insecure deserialization in BentoML

Insecure deserialization in BentoML

▾ Midnightbentoml · bentomlEPSS 1.5%via OSV
CVE-2024-3098Critical· 9.8
2y ago

llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

▾ Midnightllama-index-core · llama-index-coreEPSS 0.96%via OSV
CVE-2024-29296Medium· 5.3PoC
2y ago

Portainer CE allows username enumeration through authentication response timing

Portainer CE allows username enumeration through authentication response timing

▾ Twilightportainer · github.com/portainer/portainerEPSS 1.3%via OSV
CVE-2024-2195Critical· 9.8
2y ago

Aim Web API vulnerable to Remote Code Execution

Aim Web API vulnerable to Remote Code Execution

▾ Midnightaim · aimEPSS 1.8%via OSV
CVE-2024-25128Critical· 9.1
2y ago

Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID

Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID

▾ Midnightflask-appbuilder · flask-appbuilderEPSS 0.86%via OSV
CVE-2024-27444Critical· 9.8
2y ago

LangChain Experimental vulnerable to arbitrary code execution

LangChain Experimental vulnerable to arbitrary code execution

▾ Midnightlangchain-experimental · langchain-experimentalEPSS 0.77%via OSV
CVE-2024-25141Critical· 9.1
2y ago

Improper Certificate Validation in apache airflow mongo hook

Improper Certificate Validation in apache airflow mongo hook

▾ Midnightapache-airflow-providers-mongo · apache-airflow-providers-mongoEPSS 0.63%via OSV
CVE-2024-23641High· 7.5
2y ago

Sending a GET or HEAD request with a body crashes SvelteKit

Sending a GET or HEAD request with a body crashes SvelteKit

▾ Twilightsveltejs · @sveltejs/kitEPSS 0.76%via GHSA
CVE-2023-49657Critical· 9.6
2y ago

Cross-site Scripting in Apache superset

Cross-site Scripting in Apache superset

▾ Midnightapache-superset · apache-supersetEPSS 0.84%via OSV
CVE-2024-23730Critical· 9.8
2y ago

Unsafe yaml deserialization in llama-hub

Unsafe yaml deserialization in llama-hub

▾ Midnightllama-hub · llama-hubEPSS 1.2%via OSV
CVE-2024-21669Critical· 9.9
2y ago

Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

▾ Midnightaries-cloudagent · aries-cloudagentEPSS 0.63%via OSV
CVE-2023-6569Critical· 9.3
2y ago

External Control of File Name or Path in h2oai/h2o-3

External Control of File Name or Path in h2oai/h2o-3

▾ Midnighth2o · h2oEPSS 0.72%via OSV
CVE-2023-46589High· 7.5
2y ago

Apache Tomcat Improper Input Validation vulnerability

Apache Tomcat Improper Input Validation vulnerability

▾ Twilightapache · org.apache.tomcat:tomcat-catalinaEPSS 2.7%via GHSA
CVE-2023-48238High· 7.5
2y ago

json-web-token library is vulnerable to a JWT algorithm confusion attack

json-web-token library is vulnerable to a JWT algorithm confusion attack

▾ Twilightjson-web-token · json-web-tokenEPSS 0.31%via GHSA
CVE-2023-46118Medium· 4.9
3y ago

rabbitmq-server: DoS by publishing large messages over the HTTP API (CVE-2023-46118)

A flaw was found in the rabbitmq-server. An authenticated user with sufficient credentials can publish very large messages over the HTTP API and cause the target node to be terminated by an "out-of-memory killer" like mechanism.

▾ SunlitRed Hat · Red Hat OpenStack Platform 16.1EPSS 1.3%via CSAF
CVE-2023-32785Critical· 9.8
3y ago

Langchain SQL Injection vulnerability

Langchain SQL Injection vulnerability

▾ Midnightlangchain · langchainvia OSV
CVE-2023-41052Medium· 5.3
3y ago

incorrect order of evaluation of side effects for some builtins

incorrect order of evaluation of side effects for some builtins

▾ Sunlitvyper · vyperEPSS 0.54%via OSV
CVE-2023-35797Critical· 9.8
3y ago

Apache Airflow Hive Provider Beeline remote code execution with Principal

Apache Airflow Hive Provider Beeline remote code execution with Principal

▾ Midnightapache-airflow-providers-apache-hive · apache-airflow-providers-apache-hiveEPSS 2.8%via OSV
CVE-2023-32321Critical· 9.8
3y ago

Ckan remote code execution and private information access via crafted resource ids

Ckan remote code execution and private information access via crafted resource ids

▾ Midnightckan · ckanEPSS 1.7%via OSV
CVE-2023-28706Critical· 9.8
3y ago

Apache Airflow Hive Provider vulnerable to code injection

Apache Airflow Hive Provider vulnerable to code injection

▾ Midnightapache-airflow-providers-apache-hive · apache-airflow-providers-apache-hiveEPSS 2.8%via OSV
CVE-2023-29008High· 8.8
3y ago

SvelteKit framework has Insufficient CSRF protection for CORS requests

SvelteKit framework has Insufficient CSRF protection for CORS requests

▾ Twilightsveltejs · @sveltejs/kitEPSS 0.37%via GHSA
CVE-2023-29003High· 8.8
3y ago

SvelteKit vulnerable to Cross-Site Request Forgery

SvelteKit vulnerable to Cross-Site Request Forgery

▾ Twilightsveltejs · @sveltejs/kitEPSS 0.56%via GHSA
CVE-2023-1712Critical· 9.8
3y ago

Use of hard-coded, security-relevant constants in deepset-ai/haystack

Use of hard-coded, security-relevant constants in deepset-ai/haystack

▾ Midnightfarm-haystack · farm-haystackEPSS 0.85%via OSV
CVE-2023-25696Critical· 9.8
3y ago

Apache Airflow Hive Provider Improper Input Validation vulnerability

Apache Airflow Hive Provider Improper Input Validation vulnerability

▾ Midnightapache-airflow-providers-apache-hive · apache-airflow-providers-apache-hiveEPSS 2.0%via OSV
CVE-2023-25693Critical· 9.8
3y ago

Apache Airflow Sqoop Provider Improper Input Validation vulnerability

Apache Airflow Sqoop Provider Improper Input Validation vulnerability

▾ Midnightapache-airflow-providers-apache-sqoop · apache-airflow-providers-apache-sqoopEPSS 1.9%via OSV
CVE-2023-25691Critical· 9.8
3y ago

Apache Airflow Google Provider Improper Input Validation vulnerability

Apache Airflow Google Provider Improper Input Validation vulnerability

▾ Midnightapache-airflow-providers-google · apache-airflow-providers-googleEPSS 1.6%via OSV
CVE-2023-22884Critical· 9.8PoC
3y ago

Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Command Injection in Apache Airflow and Apache Airflow MySQL Provider

▾ Abyssalapache-airflow · apache-airflowEPSS 12%via OSV
CVE-2022-46421Critical· 9.8
3y ago

Apache Airflow Hive Provider vulnerable to Command Injection

Apache Airflow Hive Provider vulnerable to Command Injection

▾ Midnightapache-airflow-providers-apache-hive · apache-airflow-providers-apache-hiveEPSS 3.3%via OSV
CVE-2022-40189Critical· 9.8
3y ago

OS Command Injection in Apache Airflow

OS Command Injection in Apache Airflow

▾ Midnightapache-airflow · apache-airflowEPSS 4.2%via OSV
CVEs tagged “ghsa” — page 191 · VulnSea