VulnSea

Tagged “osv”

CVEs tagged osv, newest first.

7207 CVEsRSS

CVE-2025-30162Low· 3.2
1y ago

Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers

Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers

▾ Sunlitcilium · github.com/cilium/ciliumEPSS 0.22%via OSV
CVE-2025-2592High· 8.8
1y ago

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the funct…

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads …

▾ Twilightpyassimp · pyassimpEPSS 0.74%via OSV
CVE-2025-45286Low
1y ago

Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

▾ Sunlitmccutchen · github.com/mccutchen/go-httpbinEPSS 0.27%via OSV
CVE-2024-10553Critical· 9.8
1y ago

H2O Deserialization of Untrusted Data Vulnerability

H2O Deserialization of Untrusted Data Vulnerability

▾ Midnighth2o · h2oEPSS 1.6%via OSV
CVE-2024-11042Critical· 9.1PoC
1y ago

InvokeAI Arbitrary File Deletion vulnerability

InvokeAI Arbitrary File Deletion vulnerability

▾ Abyssalinvokeai · invokeaiEPSS 1.6%via OSV
CVE-2024-10190Critical· 9.8
1y ago

Horovod Vulnerable to Command Injection

Horovod Vulnerable to Command Injection

▾ Midnighthorovod · horovodEPSS 1.1%via OSV
CVE-2024-10902Critical· 9.1
1y ago

DB-GPT vulnerable to Arbitrary File Upload with Path Traversal

DB-GPT vulnerable to Arbitrary File Upload with Path Traversal

▾ Midnightdbgpt · dbgptEPSS 1.3%via OSV
CVE-2024-10831Critical· 9.1
1y ago

DB-GPT Absolute Path Traversal vulnerability

DB-GPT Absolute Path Traversal vulnerability

▾ Midnightdbgpt · dbgptEPSS 0.84%via OSV
CVE-2024-10833Critical· 9.1
1y ago

DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

▾ Midnightdbgpt · dbgptEPSS 0.84%via OSV
CVE-2024-10901Critical· 9.1
1y ago

DB-GPT Arbitrary File Write vulnerability

DB-GPT Arbitrary File Write vulnerability

▾ Midnightdbgpt · dbgptEPSS 1.1%via OSV
CVE-2024-10835Critical· 9.1
1y ago

DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users

DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users

▾ Midnightdbgpt · dbgptEPSS 1.2%via OSV
CVE-2024-8537Critical· 9.1
1y ago

AgentScope path traversal vulnerability

AgentScope path traversal vulnerability

▾ Midnightagentscope · agentscopeEPSS 1.0%via OSV
CVE-2024-8502Critical· 9.8
1y ago

AgentScope Deserialization Vulnerability

AgentScope Deserialization Vulnerability

▾ Midnightagentscope · agentscopeEPSS 1.8%via OSV
CVE-2024-8551Critical· 9.1
1y ago

AgentScope path traversal vulnerability in save-workflow

AgentScope path traversal vulnerability in save-workflow

▾ Midnightagentscope · agentscopeEPSS 1.0%via OSV
CVE-2024-6829Critical· 9.1
1y ago

Aim External Control of File Name or Path vulnerability

Aim External Control of File Name or Path vulnerability

▾ Midnightaim · aimEPSS 0.88%via OSV
CVE-2024-9070Critical· 9.8
1y ago

BentoML deserialization vulnerability

BentoML deserialization vulnerability

▾ Midnightbentoml · bentomlEPSS 0.93%via OSV
GHSA-w466-2wfc-8g58High· 7.5
1y ago

Open WebUI has vulnerable dependency on starlette via fastapi

Open WebUI has vulnerable dependency on starlette via fastapi

▾ Twilightopen-webui · open-webuivia OSV
CVE-2024-8063High· 7.5
1y ago

Ollama Divide by Zero Vulnerability

Ollama Divide by Zero Vulnerability

▾ Twilightollama · github.com/ollama/ollamaEPSS 0.64%via OSV
CVE-2024-8769Critical· 9.1
1y ago

Aim path traversal in LockManager.release_locks

Aim path traversal in LockManager.release_locks

▾ Midnightaim · aimEPSS 0.93%via OSV
CVE-2024-8019Critical· 9.1
1y ago

PyTorch Lightning path traversal vulnerability

PyTorch Lightning path traversal vulnerability

▾ Midnightpytorch-lightning · pytorch-lightningEPSS 1.1%via OSV
CVE-2024-7598Low· 3.1
1y ago

Kubernetes kube-apiserver Vulnerable to Race Condition

Kubernetes kube-apiserver Vulnerable to Race Condition

▾ Sunlitkubernetes · k8s.io/kubernetes/cmd/kube-apiserverEPSS 0.32%via OSV
CVE-2024-9052Critical· 9.8
1y ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Midnightvllm · vllmvia NVD
CVE-2024-9053Critical· 9.8
1y ago

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

▾ Midnightvllm · vllmEPSS 1.4%via OSV
CVE-2024-11041Critical· 9.8
1y ago

vLLM Deserialization of Untrusted Data vulnerability

vLLM Deserialization of Untrusted Data vulnerability

▾ Midnightvllm · vllmEPSS 1.7%via OSV
CVE-2024-11958Critical· 9.8
1y ago

LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection

LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection

▾ Midnightllama-index-retrievers-duckdb-retriever · llama-index-retrievers-duckdb-retrieverEPSS 1.4%via OSV
CVE-2024-8613High· 8.8
1y ago

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. …

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, en…

▾ Twilightchuanhuchatgpt · chuanhuchatgptEPSS 0.60%via OSV
CVE-2024-6577Medium· 6.3
1y ago

TorchServe script references S3 bucket without ensuring ownership or confirming accessibility

TorchServe script references S3 bucket without ensuring ownership or confirming accessibility

▾ Sunlittorchserve · torchserveEPSS 0.40%via OSV
CVE-2024-7959High· 7.7
1y ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Twilightopen-webui · open-webuivia NVD
CVE-2024-12761High· 7.5
1y ago

imaginAIry Denial of Service (DoS) vulnerability

imaginAIry Denial of Service (DoS) vulnerability

▾ Twilightimaginairy · imaginairyEPSS 0.72%via OSV
CVE-2024-11602High· 7.4
1y ago

Feast Cross-Origin Resource Sharing vulnerability

Feast Cross-Origin Resource Sharing vulnerability

▾ Twilightfeast · feastEPSS 0.31%via OSV
CVEs tagged “osv” — page 160 · VulnSea