Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2024-45857High· 7.8Cleanlab Deserialization of Untrusted Data vulnerability
Cleanlab Deserialization of Untrusted Data vulnerability
CVE-2024-27321High· 7.8Refuel Autolab Eval Injection vulnerability
Refuel Autolab Eval Injection vulnerability
CVE-2024-45856Critical· 9.0MindsDB Cross-site Scripting vulnerability
MindsDB Cross-site Scripting vulnerability
CVE-2024-6091Critical· 9.8AutoGPT bypass of the shell commands denylist settings
AutoGPT bypass of the shell commands denylist settings
CVE-2024-45595Medium· 6.1D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
RUSTSEC-2024-0404NoneUnsoundness in anstream
Unsoundness in anstream
CVE-2024-45498High· 8.8Apache Airflow vulnerable to Improper Encoding or Escaping of Output
Apache Airflow vulnerable to Improper Encoding or Escaping of Output
CVE-2024-45034High· 8.8Apache Airflow vulnerable to Execution with Unnecessary Privileges
Apache Airflow vulnerable to Execution with Unnecessary Privileges
CVE-2024-45758Critical· 9.1H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
CVE-2024-45405Medium· 6.0gix-path improperly resolves configuration path reported by Git
gix-path improperly resolves configuration path reported by Git
CVE-2024-34158NoneStack exhaustion in Parse in go/build/constraint
Stack exhaustion in Parse in go/build/constraint
CVE-2024-45314Low· 3.6Flask-AppBuilder's login form allows browser to cache sensitive fields
Flask-AppBuilder's login form allows browser to cache sensitive fields
CVE-2024-45053Critical· 9.1Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
CVE-2024-45052LowTiming-Based Username Enumeration Vulnerability in Fides Webserver Authentication
Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication
GHSA-h4gh-qq45-vh27Mediumpyca/cryptography has a vulnerable OpenSSL included in cryptography wheels
pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels
CVE-2024-45305Low· 2.5gix-path uses local config across repos when it is the highest scope
gix-path uses local config across repos when it is the highest scope
GHSA-w2pj-9cgh-mq2cHigh· 8.8opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
GHSA-qr4w-53vh-m672High· 8.8opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
CVE-2023-26043Medium· 6.5GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
GHSA-jh2j-j4j9-crg3High· 8.8opencv-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
opencv-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
GHSA-cxjf-x6jp-p7mcHigh· 8.8opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
CVE-2023-23611Low· 3.7LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
CVE-2020-11093High· 7.5Hyperledger Indy's update process of a DID does not check who signs the request
Hyperledger Indy's update process of a DID does not check who signs the request
CVE-2020-15100Low· 2.8freewvs vulnerable to denial of service through large files
freewvs vulnerable to denial of service through large files
CVE-2020-15101Low· 2.8freewvs's nested directory structure can interrupt scan
freewvs's nested directory structure can interrupt scan
CVE-2021-21401High· 7.1PoCnanopb vulnerable to invalid free() call with oneofs and PB_ENABLE_MALLOC
nanopb vulnerable to invalid free() call with oneofs and PB_ENABLE_MALLOC
CVE-2024-43805High· 7.6HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
CVE-2024-42818Medium· 6.1FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function
FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function
CVE-2024-42816Medium· 6.1FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function
FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function
CVE-2024-45188Medium· 6.5Mage AI Path Traversal vulnerability
Mage AI Path Traversal vulnerability