Tagged “osv”
CVEs tagged osv, newest first.
5712 CVEsRSS
CVE-2024-37055High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37059High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37065High· 7.8Skops unsafe deserialization
Skops unsafe deserialization
CVE-2024-37061High· 8.8MLFlow improper input validation
MLFlow improper input validation
CVE-2024-37057High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37054High· 8.8PoCMLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37062High· 7.8ydata unsafe deserialization
ydata unsafe deserialization
CVE-2024-37058High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37060High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37064High· 7.8ydata unsafe deserialization
ydata unsafe deserialization
CVE-2024-37056High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37052High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37053High· 8.8MLFlow unsafe deserialization
MLFlow unsafe deserialization
CVE-2024-37063High· 7.8ydata cross-site scripting
ydata cross-site scripting
CVE-2024-22261Low· 2.7SQL Injection in Harbor scan log API
SQL Injection in Harbor scan log API
CVE-2024-22244Medium· 4.3Open Redirect URL in Harbor
Open Redirect URL in Harbor
CVE-2024-35228Medium· 5.5Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
CVE-2024-35189Medium· 6.5Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
CVE-2024-3924Medium· 4.4code injection vulnerability exists in the huggingface/text-generation-inference repository
code injection vulnerability exists in the huggingface/text-generation-inference repository
CVE-2024-35196Low· 2.0Slack integration leaks sensitive information in logs
Slack integration leaks sensitive information in logs
CVE-2024-4330Medium· 4.0path traversal vulnerability was identified in the parisneo/lollms-webui
path traversal vulnerability was identified in the parisneo/lollms-webui
CVE-2024-34715Low· 2.3Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
CVE-2024-36105Medium· 5.3dbt allows Binding to an Unrestricted IP Address via socketsocket
dbt allows Binding to an Unrestricted IP Address via socketsocket
CVE-2024-36110High· 8.2ansibleguy-webui Cross-site Scripting vulnerability
ansibleguy-webui Cross-site Scripting vulnerability
CVE-2022-4969Medium· 5.3rockhopper Buffer Overflow vulnerability
rockhopper Buffer Overflow vulnerability
CVE-2024-35232Low· 3.7github.com/huandu/facebook may expose access_token in error message.
github.com/huandu/facebook may expose access_token in error message.
GHSA-f7cq-5v43-8pwpMedium· 5.3Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
CVE-2024-28188Medium· 5.3jupyter-scheduler's endpoint is missing authentication
jupyter-scheduler's endpoint is missing authentication
CVE-2024-35223Medium· 5.3Dapr API Token Exposure
Dapr API Token Exposure
CVE-2024-32969Low· 2.7vantage6 collaboration admins can extend their influence by expanding the collaboration
vantage6 collaboration admins can extend their influence by expanding the collaboration