Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2024-39700Critical· 9.9PoCJupyterLab extension template is a `copier` template for JupyterLab extensions
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has an RCE vulnerability. Extension author…
CVE-2024-39887Medium· 4.3PoCApache Superset vulnerable to improper SQL authorization
Apache Superset vulnerable to improper SQL authorization
CVE-2024-6345High· 8.8pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or …
CVE-2024-40627Medium· 5.8OpaMiddleware does not filter HTTP OPTIONS requests
OpaMiddleware does not filter HTTP OPTIONS requests
CVE-2024-39909Medium· 6.5SQL Injection in the KubeClarity REST API
SQL Injection in the KubeClarity REST API
CVE-2024-39903High· 8.6PoCLocal File Inclusion in Solara
Local File Inclusion in Solara
CVE-2024-6468High· 7.5Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
CVE-2024-39905Medium· 5.3Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
CVE-2024-38875High· 7.5Django vulnerable to Denial of Service
Django vulnerable to Denial of Service
CVE-2024-39614High· 7.5PoCDjango vulnerable to Denial of Service
Django vulnerable to Denial of Service
CVE-2024-39330High· 7.5Django Path Traversal vulnerability
Django Path Traversal vulnerability
CVE-2024-6037Critical· 9.1A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the serv…
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resul…
CVE-2024-39897Medium· 4.3Cache driver GetBlob() allows read access to any blob without access control check
Cache driver GetBlob() allows read access to any blob without access control check
CVE-2024-5569Medium· 6.2zipp Denial of Service vulnerability
zipp Denial of Service vulnerability
CVE-2024-6227High· 7.5Aim denial of service vulnerability
Aim denial of service vulnerability
CVE-2024-39697High· 8.6phonenumber: panic on parsing crafted phonenumber inputs
phonenumber: panic on parsing crafted phonenumber inputs
CVE-2024-39689LowPoCCertifi removes GLOBALTRUST root certificate
Certifi removes GLOBALTRUST root certificate
CVE-2024-32498Medium· 6.5OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
CVE-2024-5753High· 7.5Vanna vulnerable to SQL Injection
Vanna vulnerable to SQL Injection
CVE-2024-31223Medium· 5.3PoCInformation Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
CVE-2024-38537None· 0.0PoCInclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
CVE-2024-38519High· 7.8yt-dlp File system modification and RCE through improper file-extension sanitization
yt-dlp File system modification and RCE through improper file-extension sanitization
CVE-2024-37298High· 7.5Potential memory exhaustion attack due to sparse slice deserialization
Potential memory exhaustion attack due to sparse slice deserialization
CVE-2024-35255Medium· 5.5azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity (CVE-2024…
A flaw was found in Microsoft's Azure Identity Libraries and the Microsoft Authentication Library (MSAL). The flaw arises from a race condition—a scenario where the timing of events leads to unexpected behavior—during concurrent operations…
CVE-2024-39303Medium· 4.4Weblate vulnerable to improper sanitization of project backups
Weblate vulnerable to improper sanitization of project backups
CVE-2024-39705High· 7.5ntlk unsafe deserialization vulnerability
ntlk unsafe deserialization vulnerability
GO-2024-2941NoneACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik
ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik
CVE-2024-5899NoneImproper trust check in Bazel Build intellij plugin in github.com/bazelbuild/intellij
Improper trust check in Bazel Build intellij plugin in github.com/bazelbuild/intellij
CVE-2024-5980Critical· 9.1pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
CVE-2024-6090High· 7.5A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histo…
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target s…