CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- oneflowAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when...7.5 High
- evmosEvmos's contract balance not updating correctly after interchain transaction7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary6.5 Medium
- zenml, zenml-io zenml-io/zenml +1 moreRace Condition Vulnerability in zenml-io/zenml3.1 Low
- ibm doors next, engineering requirements management doors next +1 moreIBM Engineering Requirements Management DOORS Next XML external entity injection8.2 High
- linuxfoundation onnxPath Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0...8.8 High
- linuxfoundation onnx, onnx onnx/onnx +1 moreArbitrary File Overwrite in download_model_with_test_data in onnx/onnx8.8 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreImproper Access Control in gaizhenbiao/chuanhuchatgpt6.5 Medium
- lollms, parisneo parisneo/lollms, lollms-webui +2 morePath Traversal in parisneo/lollms9.8 Critical
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreUnrestricted File Upload leading to RCE in gaizhenbiao/chuanhuchatgpt6.5 Medium
- oneflowImproper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of...7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreSSRF in mintplex-labs/anything-llm9.6 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Authorization in lunary-ai/lunary7.5 High
- oneflowOneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter...5.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUncontrolled Resource Consumption in mintplex-labs/anything-llm6.5 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webui8.4 High
- oneflowAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when...7.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal and Denial of Service in parisneo/lollms-webui8.2 High
- quivr, stangirard stangirard/quivr +1 moreSSRF Vulnerability in stangirard/quivr7.7 High
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreOS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt7.8 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary7.5 High
- berriai berriai/litellm, litellm +1 moreArbitrary File Deletion in BerriAI/litellm6.5 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow7.5 High
- langchain, langchain-ai langchain-ai/langchain +1 moreSSRF in Langchain Web Research Retriever in langchain-ai/langchain4.8 Medium
- lunary, lunary-ai lunary-ai/lunary +1 morePrivilege Escalation Vulnerability in lunary-ai/lunary8.2 High
- scikit-learn, scikit-learn scikit-learn/scikit-learn +1 moreSensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn4.7 Medium
- zenml, zenml-io zenml-io/zenml +1 moreImproper Authorization in zenml-io/zenml6.5 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCSRF File Upload Vulnerability in parisneo/lollms-webui8.3 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreStored XSS vulnerability in gaizhenbiao/chuanhuchatgpt6.8 Medium
- berriai berriai/litellm, litellm +1 moreBlind SQL Injection in berriai/litellm4.9 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm desktop, anythingllm docker +2 moreCross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm3.4 Low
- parisneo lollms, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui9.8 Critical
- zenml, zenml-io zenml-io/zenml +1 moreStored XSS in zenml-io/zenml3.4 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreAccount Takeover via Exposed Recovery Token in lunary-ai/lunary9.1 Critical
- kofax power pdfKofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 morePath Traversal in gaizhenbiao/chuanhuchatgpt9.8 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreCross-site Scripting (XSS) in SAML metadata endpoint in lunary-ai/lunary7.4 High
- imartinez imartinez/privategpt, privategpt +1 moreServer Side Request Forgery (SSRF) in imartinez/privategpt8.3 High
- berriai berriai/litellm, litellm +1 moreSQL Injection in berriai/litellm6.4 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreRemote Code Execution due to Full Controlled File Write in mlflow/mlflow10.0 Critical
- zenml, zenml-io zenml-io/zenml +1 moreImproper Authentication in zenml-io/zenml3.3 Low
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreJSON Injection in mintplex-labs/anything-llm5.3 Medium
- kofax power pdfKofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- ibm system storage ds8900f, ds8900f firmware +1 moreIBM System Storage improper authentication5.0 Medium
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreImproper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt8.8 High
- kofax power pdfKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- h2o, h2oai h2oai/h2o-3, h2oai\/h2o-3 +2 moreExposure of Sensitive Information via Arbitrary System Path Lookup in h2oai/h2o-35.3 Medium
- zenml, zenml-io zenml-io/zenml +1 moreClickjacking Vulnerability in zenml-io/zenml4.3 Medium
- lollms, parisneo parisneo/lollms +1 morePath Traversal in parisneo/lollms7.5 High
- ariane allegro scenario playerAriane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows...6.8 Medium
- Show moreLoading…