Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2024-37054High· 8.8PoCMLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37062High· 7.8ydata unsafe deserialization
ydata unsafe deserialization
CVE-2024-37058High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37060High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37064High· 7.8ydata unsafe deserialization
ydata unsafe deserialization
CVE-2024-37056High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37052High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37053High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37063High· 7.8ydata cross-site scripting
ydata cross-site scripting
CVE-2024-22261Low· 2.7SQL Injection in Harbor scan log API
SQL Injection in Harbor scan log API
CVE-2024-22244Medium· 4.3Open Redirect URL in Harbor
Open Redirect URL in Harbor
CVE-2024-35228Medium· 5.5Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
CVE-2024-35189Medium· 6.5Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
CVE-2024-3924Medium· 4.4code injection vulnerability exists in the huggingface/text-generation-inference repository
code injection vulnerability exists in the huggingface/text-generation-inference repository
CVE-2024-35196Low· 2.0Slack integration leaks sensitive information in logs
Slack integration leaks sensitive information in logs
CVE-2024-4330Medium· 4.0path traversal vulnerability was identified in the parisneo/lollms-webui
path traversal vulnerability was identified in the parisneo/lollms-webui
CVE-2024-36107Medium· 5.3MinIO information disclosure vulnerability
MinIO information disclosure vulnerability
CVE-2024-34715Low· 2.3Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
CVE-2024-36105Medium· 5.3dbt allows Binding to an Unrestricted IP Address via socketsocket
dbt allows Binding to an Unrestricted IP Address via socketsocket
CVE-2024-36110High· 8.2ansibleguy-webui Cross-site Scripting vulnerability
ansibleguy-webui Cross-site Scripting vulnerability
CVE-2022-4969Medium· 5.3rockhopper Buffer Overflow vulnerability
rockhopper Buffer Overflow vulnerability
CVE-2024-35232Low· 3.7github.com/huandu/facebook may expose access_token in error message.
github.com/huandu/facebook may expose access_token in error message.
GHSA-f7cq-5v43-8pwpMedium· 5.3Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
CVE-2024-28188Medium· 5.3jupyter-scheduler's endpoint is missing authentication
jupyter-scheduler's endpoint is missing authentication
CVE-2024-35197Medium· 5.4Refs and paths with reserved Windows device names access the devices
Refs and paths with reserved Windows device names access the devices
CVE-2024-35186High· 8.8Traversal outside working tree enables arbitrary code execution
Traversal outside working tree enables arbitrary code execution
CVE-2024-35223Medium· 5.3Dapr API Token Exposure
Dapr API Token Exposure
CVE-2024-32969Low· 2.7vantage6 collaboration admins can extend their influence by expanding the collaboration
vantage6 collaboration admins can extend their influence by expanding the collaboration
CVE-2024-36039Critical· 9.8PoCPyMySQL SQL Injection vulnerability
PyMySQL SQL Injection vulnerability
CVE-2024-35180Medium· 6.1OMERO.web must check that the JSONP callback is a valid function
OMERO.web must check that the JSONP callback is a valid function