Skip to content
OpenAdvisories

Archive

4 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /4 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2024-4254 Public exploit

    Secrets Exfiltration in gradio-app/gradio

    The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code…

    gradio-app gradio-app/gradio
  • High 8.8
    CVE-2024-37054 Public exploit

    MLFlow unsafe deserialization

    Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.

    MLflow MLflow mlflow PyPI
  • High 8.3
    CVE-2024-5420 Public exploit Scanner template

    Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro

    Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS)..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20…

    SEH Computertechnik INU-100 utnserver ProMAX utnserver Pro
  • High 7.5
    CVE-2024-4253 Public exploit

    Command Injection in gradio-app/gradio

    A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modi…

    gradio-app gradio-app/gradio gradio PyPI