2024

A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository,

A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fix

A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically w

A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `lollms_core/lol

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failu

A path traversal vulnerability exists in the parisneo/lollms-webui version 9.3 on the Windows platform. Due to improper

parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient

A vulnerability in the parisneo/lollms-webui version 9.3 allows attackers to bypass intended access restrictions and exe

A Cross-Site Request Forgery (CSRF) vulnerability exists in the profile picture upload functionality of the Lollms appli

An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Due to improper authentication mechanisms

A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within t

An improper authorization vulnerability exists in the zenml-io/zenml repository, specifically within the API PUT /api/v1

A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creati

The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits au

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remo

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements us

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/auto

parisneo/lollms-webui is vulnerable to path traversal and denial of service attacks due to an exposed `/select_database`

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of specia

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XX

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability

Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allow

Luxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili

Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allow

NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vu

A Server-Side Request Forgery (SSRF) vulnerability exists in the 'add_webpage' endpoint of the parisneo/lollms-webui app

A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to im

Kofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remo

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remo

Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allo

In lunary-ai/lunary version 1.2.4, a vulnerability exists in the password recovery mechanism where the reset password to

Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows networ

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows n

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows n

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows ne

In lunary-ai/lunary versions 1.2.2 through 1.2.25, an improper access control vulnerability allows users on the Free pla

A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability a

A code injection vulnerability exists in the berriai/litellm application, version 1.34.6, due to the use of unvalidated

A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within t

An improper access control vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, where an admin c

mintplex-labs/anything-llm is vulnerable to multiple security issues due to improper input validation in several endpoin

A remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment varia

An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative val

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is proce

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputti

An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same d

Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows rem

Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allow

A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows loca