Submit #1033097: eosphoros-ai DB-GPT 0.8.1 CWE-829 Inclusion of Functionality from Untrusted Control Sphere [Accepted]
Submit #1033097 / VDB-431393
Vuldb Submit
Please support the site operations by clicking ads.
Submit #1033094: eosphoros-ai DB-GPT 0.8.1 CWE-94 Improper Control of Generation of Code ('Code Injection') [Accepted]
Submit #1033094 / VDB-431392
Submit #1033096: eosphoros-ai DB-GPT 0.8.1 CWE-862 Missing Authorization [Duplicate]
Submit #1033096 / VDB-422583
Submit #1033095: eosphoros-ai DB-GPT 0.8.1 CWE-94 Improper Control of Generation of Code ('Code Injection') [Duplicate]
Submit #1033095 / VDB-422583
Submit #1031850: https://github.com/OpenHands OpenHands 1.20.0 Local Sensitive Logic Exposure leading to Remote Code Execution [Accepted]
Submit #1031850 / VDB-431199
Submit #1027893: itsourcecode Airline Reservation System V1.0 SQL Injection [Accepted]
Submit #1027893 / VDB-431165
Submit #1027505: SourceCodester Online Food Ordering System 1.0 Cross Site Scripting [Accepted]
Submit #1027505 / VDB-431164
Submit #1028313: OpenPPL ppl.nn commit bb84dc9952809b3a5a0036858a3d9f68af1c83d5 Out-of-bounds Read [Accepted]
Submit #1028313 / VDB-431163
Submit #1028201: DeepGraphLearning KnowledgeGraphEmbedding commit 2e440e0f9c687314d5ff67ead68ce985dc446e3a Path Traversal [Accepted]
Submit #1028201 / VDB-431162
Submit #1028200: MyShell AIlice 0.4.0 (commit 63a22105cdf8c0d297af332010f46e4153bbc1ec) Improper Input Validation [Accepted]
Submit #1028200 / VDB-431160
Submit #1028151: Edge0-AI Audio8_TTS commit 07e40f5d0b03 Path Traversal [Accepted]
Submit #1028151 / VDB-431159
Submit #1028435: PyTorch (The Linux Foundation) PyTorch - Mobile/Lite FlatBuffer model loader (torch/csrc/jit/mobile/flatbuffer_loader.cpp) 2.15.0a0 (commit 9a3eac3b8ffba6e54e61df7ebecfb0afcc5e5a74), audited source tree Memory Corruption (Out-of-Bounds…
Submit #1028435 / VDB-303012
Submit #1028117: InvoiceShelf up to 2.4.3/3.0.0-alpha.1/3.0.0-alpha.2/3.0.0-alpha.3 Cross-Tenant Privilege Escalation / Incorrect Authorization [Accepted]
Submit #1028117 / VDB-431158
Submit #1028030: Purocean Yank Note 3.93.0 OS Command Injection / Missing Authentication for Critical Funct [Accepted]
Submit #1028030 / VDB-431157
Submit #1028031: Purocean Yank Note 3.93.0 Information Disclosure [Accepted]
Submit #1028031 / VDB-431155
Submit #1027491: SourceCodester Online Food Ordering System 1.0 SQL Injection [Duplicate]
Submit #1027491 / VDB-403412
Submit #1027487: SourceCodester Online Food Ordering System 1.0 SQL Injection [Duplicate]
Submit #1027487 / VDB-403411
Submit #1027457: SourceCodester Online Food Ordering System 1.0 Client-Side Enforcement of Server-Side Security [Duplicate]
Submit #1027457 / VDB-426511
Submit #1027429: Presenton 0.9.11-beta Cross-Site Request Forgery [Accepted]
Submit #1027429 / VDB-431151
Submit #1027352: fflate <=0.8.3 Memory Corruption [Accepted]
Submit #1027352 / VDB-431150
Submit