The product does not properly verify that the source of data or communication is valid.
479 vulnerabilities with CWE-346
CVE-2024-13068
HIGH
LimonDesk <1.02.17 - Forceful Browsing
CVSS 7.3
CVE-2024-12973
MEDIUM
Akinsoft OctoCloud <1.11.01 - SSRF
CVSS 4.7
CVE-2024-31127
HIGH
Zscaler Client Connector <4.2.0.241 - Privilege Escalation
CVSS 7.3
CVE-2024-45354
MEDIUM
Xiaomi Shop App - RCE
CVSS 4.3
CVE-2024-45353
MEDIUM
Xiaomi Quick App - Open Redirect
CVSS 4.3
CVE-2024-45352
HIGH
Xiaomi smarthome - RCE
CVSS 8.8
CVE-2024-8487
CRITICAL
modelscope/agentscope <0.0.4 - CSRF
CVSS 9.8
CVE-2024-8183
HIGH
prefecthq/prefect <2.20.2 - SSRF
CVSS 7.6
CVE-2024-8024
HIGH
netease-youdao/qanything <1.4.1 - SSRF
CVSS 7.5
CVE-2024-7819
HIGH
danswer-ai/danswer v1.4.1 - SSRF
CVSS 7.4
CVE-2024-6844
MEDIUM
corydolphin/flask-cors 4.0.1 - Info Disclosure
CVSS 5.3
CVE-2024-11602
HIGH
Feast-dev/feast <0.40.0 - CSRF
CVSS 7.4
CVE-2024-11045
CRITICAL
Automatic1111 Stable-diffusion-webui - Improper Access Control
CVSS 9.6
CVE-2024-10956
HIGH
Binary-husky Gpt Academic - Origin Validation Error
CVSS 7.1
CVE-2024-55948
HIGH
Discourse < 3.3.2 - Origin Validation Error
CVSS 8.2
CVE-2024-57965
NONE
Axios < 1.7.8 - Origin Validation Error
CVE-2024-21245
MEDIUM
Oracle JD Edwards Enterpriseone Tools - Origin Validation Error
CVSS 5.4
CVE-2024-55917
HIGH
Trendmicro Apex One < 14.0.14203 - Origin Validation Error
CVSS 7.8
CVE-2024-56170
MEDIUM
Nicmx Fort-validator < 1.6.6 - Origin Validation Error
CVSS 5.3
CVE-2024-54490
MEDIUM
Apple Macos < 15.2 - Origin Validation Error
CVSS 5.5
CVE-2024-44212
MEDIUM
Apple Safari < 18.1 - Origin Validation Error
CVSS 5.3
CVE-2024-45495
MEDIUM
MSA FieldServer Gateway <6.5.2 - SSRF
CVSS 4.3
CVE-2024-51072
MEDIUM
KIA Seltos v1.0 - DoS
CVSS 5.3
CVE-2024-51037
MEDIUM
Kodcloud Kodbox < 1.52.04 - Origin Validation Error
CVSS 5.3
CVE-2024-50654
HIGH
Pickmall Lilishop < 4.2.4 - Origin Validation Error
CVSS 7.5
Details
Vulnerabilities
479