JFrog Security Research

Software Vulnerabilities

Last Updated On 16 Apr, 2024

127

Vulnerabilities
discovered

JFSA-2024-001028816
lollms-webui exposed endpoints DoShighCVE-2024-1873
CVE-2024-1873
CVE-2024-1873
high
Discovered ByNaveh Racovsky●
Published on 16 Apr, 2024 ●
JFSA-2024-001028813
lollms-webui SQLi DoShighCVE-2024-1601
CVE-2024-1601
CVE-2024-1601
high
Discovered ByNaveh Racovsky●
Published on 15 Apr, 2024 ●
JFSA-2024-001028815
lollms-webui exposued endpoints DoShighCVE-2024-1646
CVE-2024-1646
CVE-2024-1646
high
Discovered ByNaveh Racovsky●
Published on 15 Apr, 2024 ●
JFSA-2024-001028813
lollms-webui resource consumption DoSmediumCVE-2024-1569
CVE-2024-1569
CVE-2024-1569
medium
Discovered ByNaveh Racovsky●
Published on 15 Apr, 2024 ●
JFSA-2024-000631930
MLflow untrusted recipe XSSHighCVE-2024-27132
CVE-2024-27132
CVE-2024-27132
High
Discovered ByUriya Yavnieli●
Published on 23 Feb, 2024 ●
JFSA-2024-000631932
MLflow untrusted dataset XSSHighCVE-2024-27133
CVE-2024-27133
CVE-2024-27133
High
Discovered ByUriya Yavnieli●
Published on 23 Feb, 2024 ●
JFSA-2024-000639017
MLflow spark_udf localprivHighCVE-2024-27134
CVE-2024-27134
CVE-2024-27134
High
Discovered ByUriya Yavnieli●
Published on 23 Feb, 2024 ●
JFSA-2024-000510085
VectorAdmin domain restriction authentication bypassmediumCVE-2024-0879
CVE-2024-0879
CVE-2024-0879
medium
Discovered ByNatan Nehorai●
Published on 25 Jan, 2024 ●
AnythingLLM Unhandled Exception DoShighCVE-2024-22422
CVE-2024-22422
CVE-2024-22422
high
Discovered ByNatan Nehorai●
Published on 22 Jan, 2024 ●
CouchDB Session Hijacking LocalPrivmediumCVE-2023-45725
CVE-2023-45725
CVE-2023-45725
medium
Discovered ByNatan Nehorai●
Published on 14 Dec, 2023 ●