Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Directory Traversal	org.sonatype.nexus:nexus-repository [0,]	Maven	17 May 2024
M Uncontrolled Resource Consumption	gvisor.dev/gvisor/pkg/sentry/vfs <20231204.0.0	Go	17 May 2024
M Uncontrolled Resource Consumption	github.com/google/gvisor/pkg/sentry/vfs <20231204.0.0	Go	17 May 2024
C Improper Input Validation	zabbix/zabbix [,6.0.28rc1) [6.4.0,6.4.13rc1) [7.0.0alpha1,7.0.0beta2)	Unmanaged (C/C++)	17 May 2024
M Uncontrolled Resource Consumption	github.com/stacklok/minder/internal/engine/ingester/rest <0.0.49	Go	17 May 2024
M Execution with Unnecessary Privileges	github.com/submariner-io/submariner-operator *	Go	17 May 2024
H Improper Control of Generation of Code ('Code Injection')	tac_plus [0,]	Unmanaged (C/C++)	17 May 2024
C Improper Neutralization of Special Elements used in a Command ('Command Injection')	consoleme [,1.4.0)	pip	17 May 2024
H Prototype Pollution	njwt *	npm	17 May 2024
C External Control of Assumed-Immutable Web Parameter	joomla/input >=2.0.0, <2.0.2	Composer	17 May 2024
M URL Redirection to Untrusted Site ('Open Redirect')	friendsofsymfony/oauth2-php <1.3.0	Composer	17 May 2024
M Incorrect Permission Assignment for Critical Resource	datadog/dd-trace >=0.30.0, <0.30.2	Composer	17 May 2024
C Improper Input Validation	contao/core >=2.0.0, <2.11.17 >=3.0.0, <3.2.9	Composer	17 May 2024
M Denial of Service (DoS)	github.com/go-yaml/yaml *	Go	17 May 2024
M Uncontrolled Resource Consumption	rexml <3.2.7	RubyGems	17 May 2024
H Path Traversal	mlflow [,2.11.2) [2.12.0,2.12.1)	pip	16 May 2024
H Improper Control of Generation of Code ('Code Injection')	llama-index [0.9.47,0.10.13)	pip	16 May 2024
L Loop with Unreachable Exit Condition ('Infinite Loop')	wireshark [,3.6.23) [4.0.0,4.0.15) [4.2.0,4.2.5)	Unmanaged (C/C++)	16 May 2024
M Exposure of Sensitive Information to an Unauthorized Actor	github.com/wolfi-dev/wolfictl/pkg/git <0.16.10	Go	16 May 2024
M Exposure of Sensitive Information to an Unauthorized Actor	github.com/wolfi-dev/wolfictl/pkg/advisory <0.16.10	Go	16 May 2024
H Server-Side Request Forgery (SSRF)	wandb [0,]	pip	16 May 2024
L Inadequate Encryption Strength	github.com/nats-io/nats-server/server <2.2.3	Go	16 May 2024
C Command Injection	lollms [0,]	pip	16 May 2024
C Type Confusion	chromium [,125.0.6422.60)	Unmanaged (C/C++)	16 May 2024
H Use After Free	chromium [,125.0.6422.60)	Unmanaged (C/C++)	16 May 2024
L User Interface (UI) Misrepresentation of Critical Information	chromium [,125.0.6422.60)	Unmanaged (C/C++)	16 May 2024
H Use After Free	chromium [,125.0.6422.60)	Unmanaged (C/C++)	16 May 2024
M Improper Access Control	mlflow [,2.12.1)	pip	16 May 2024
H Weak Password Recovery Mechanism for Forgotten Password	cartalyst/sentry >=0.0.0	Composer	16 May 2024
H Directory Traversal	getgrav/grav <1.7.46	Composer	16 May 2024

APPLICATION

OPERATING SYSTEM