JFrog Security Research

Software Vulnerabilities

Last Updated On 23 Feb, 2024

123

Vulnerabilities
discovered

JFSA-2024-000631930
MLflow untrusted recipe XSSHighCVE-2024-27132
CVE-2024-27132
CVE-2024-27132
High
Discovered ByUriya Yavnieli●
Published on 23 Feb, 2024 ●
JFSA-2024-000631932
MLflow untrusted dataset XSSHighCVE-2024-27133
CVE-2024-27133
CVE-2024-27133
High
Discovered ByUriya Yavnieli●
Published on 23 Feb, 2024 ●
JFSA-2024-000639017
MLflow spark_udf localprivHighCVE-2024-27134
CVE-2024-27134
CVE-2024-27134
High
Discovered ByUriya Yavnieli●
Published on 23 Feb, 2024 ●
JFSA-2024-000510085
VectorAdmin domain restriction authentication bypassmediumCVE-2024-0879
CVE-2024-0879
CVE-2024-0879
medium
Discovered ByNatan Nehorai●
Published on 25 Jan, 2024 ●
AnythingLLM Unhandled Exception DoShighCVE-2024-22422
CVE-2024-22422
CVE-2024-22422
high
Discovered ByNatan Nehorai●
Published on 22 Jan, 2024 ●
CouchDB Session Hijacking LocalPrivmediumCVE-2023-45725
CVE-2023-45725
CVE-2023-45725
medium
Discovered ByNatan Nehorai●
Published on 14 Dec, 2023 ●
XRAY-532656
MLeap Path Traversal RCEmediumCVE-2023-5245
CVE-2023-5245
CVE-2023-5245
medium
Discovered ByDavid Fadida●
Published on 15 Nov, 2023 ●
XRAY-532775
libX11 & libXpm Stack Exhaustion DoSmediumCVE-2023-43786
CVE-2023-43786
CVE-2023-43786
medium
Discovered ByYair Mizrahi●
Published on 4 Oct, 2023 ●
XRAY-532777
libX11 & libXpm Heap Overflow RCEhighCVE-2023-43787
CVE-2023-43787
CVE-2023-43787
high
Discovered ByYair Mizrahi●
Published on 4 Oct, 2023 ●
XRAY-526292
Plexus Archiver arbitrary file overwritehighCVE-2023-37460
CVE-2023-37460
CVE-2023-37460
high
Discovered ByUriya Yavnieli●
Published on 26 Jul, 2023 ●