СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-5627 Path Traversal in mintplex-labs/anything-llm mintplex-labs / mintplex-labs/anything-llm · mintplexlabs / anythingllm | Критический | 7.2 | 0,81 % | PoCПатч | 07.04.2026 | |
| CVE-2024-8769 Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim aimhubio / aimhubio/aim · aim | Критический | 9.1 | 0,93 % | PoC | 20.03.2025 | |
| CVE-2024-8537 Path Traversal in modelscope/agentscope modelscope / modelscope/agentscope · agentscope | Критический | 9.1 | 1,04 % | 20.03.2025 | ||
| CVE-2025-15036 Path Traversal Vulnerability in mlflow/mlflow mlflow / mlflow/mlflow · Red Hat / Red Hat OpenShift AI (RHOAI) | Критический | 9.6 | 0,59 % | 30.03.2026 | ||
| CVE-2024-1561 Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio gradio-app / gradio-app/gradio · gradio_project / gradio | Высокий | 7.5 | 9,31 % | Патч | 16.04.2024 | |
| CVE-2026-10732 decompress: Arbitrary File Write via Archive Extraction (Zip Slip) n/a / decompress · Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2 | Средний | 6.1 | 0,52 % | 05.06.2026 | ||
| CVE-2026-66152 A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component al SonicWall / NetExtender | Высокий | 8.8 | 0,5 % | 25.08.2026 | ||
| CVE-2024-7774 Path Traversal in langchain-ai/langchainjs langchain-ai / langchain-ai/langchainjs · langchain-ai / langchain-ai\/langchainjs | Средний | 6.5 | 0,56 % | 29.10.2024 | ||
| CVE-2024-21542 luigi Arbitrary File Write via Archive Extraction (Zip Slip) n/a / luigi · luigi | Высокий | 7.7 | 1,14 % | Патч | 10.12.2024 | |
| CVE-2024-10648 Path Traversal in gradio-app/gradio gradio-app / gradio-app/gradio · gradio | Высокий | 8.2 | 0,73 % | 20.03.2025 | ||
| CVE-2024-6139 Path Traversal in parisneo/lollms parisneo / parisneo/lollms · parisneo / lollms-webui | Высокий | 7.3 | 0,52 % | 27.06.2024 | ||
| CVE-2024-8859 Path Traversal in mlflow/mlflow mlflow / mlflow/mlflow · mlflow | Высокий | 7.5 | 2,77 % | 20.03.2025 | ||
| CVE-2024-3429 Path Traversal in parisneo/lollms parisneo / parisneo/lollms · parisneo / lollms-webui | Критический | 9.8 | 28,32 % | 06.06.2024 | ||
| CVE-2025-6209 Arbitrary File Read through Path Traversal in run-llama/llama_index run-llama / run-llama/llama_index · llama-index | Критический | 7.5 | 0,62 % | PoCПатч | 07.07.2025 | |
| CVE-2024-5443 Remote Code Execution via Path Traversal in parisneo/lollms parisneo / parisneo/lollms · parisneo / lollms | Критический | 9.8 | 1,16 % | 22.06.2024 | ||
| CVE-2024-2083 Directory Traversal in zenml-io/zenml zenml-io / zenml-io/zenml · zenmlio / zenml | Критический | 9.9 | 37,49 % | Патч | 16.04.2024 | |
| CVE-2024-3848 Path Traversal Bypass in mlflow/mlflow mlflow / mlflow/mlflow · lfprojects / mlflow | Критический | 7.5 | 43,28 % | Патч | 16.05.2024 | |
| CVE-2024-3573 Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow mlflow / mlflow/mlflow · lfprojects / mlflow | Критический | 9.3 | 0,73 % | Патч | 16.04.2024 | |
| CVE-2024-2928 Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow mlflow / mlflow/mlflow · lfprojects / mlflow | Критический | 7.5 | 21,85 % | Патч | 06.06.2024 | |
| CVE-2026-24217 NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by NVIDIA / BioNeMo Framework | Высокий | 8.8 | 0,76 % | 20.05.2026 | ||
| CVE-2026-30828 Wallos: SSRF via url parameter leading to File Traversal ellite / Wallos | Высокий | 8.7 | 0,59 % | 07.03.2026 | ||
| CVE-2025-12790 Rubygem-mqtt: rubygem-mqtt hostname validation Nicholas J Humfrey / ruby-mqtt · Red Hat / Red Hat Satellite 6 | Высокий | 7.4 | 0,38 % | 07.11.2025 | ||
| CVE-2025-66608 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
This prod Yokogawa Electric Corporation / FAST/TOOLS | Высокий | 8.7 | 0,45 % | 09.02.2026 | ||
| CVE-2024-2356 Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui parisneo / parisneo/lollms-webui | Критический | 9.6 | 0,89 % | 02.02.2026 | ||
| CVE-2025-58291 Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnera Huawei / HarmonyOS | Низкий | 3.3 | 0,11 % | 11.10.2025 | ||
| CVE-2025-50185 DbGate allows Unauthorized File Access via CSV Plugin dbgate / dbgate | Критический | 7.0 | 0,47 % | PoC | 26.07.2025 | |
| CVE-2025-50184 DbGate allows for File Traversal via file parameter dbgate / dbgate | Высокий | 7.1 | 0,62 % | 26.07.2025 | ||
| CVE-2024-11170 Path Traversal in danny-avila/librechat danny-avila / danny-avila/librechat | Высокий | 8.8 | 1,81 % | 20.03.2025 | ||
| CVE-2024-7957 Arbitrary File Overwrite in danswer-ai/danswer danswer-ai / danswer-ai/danswer | Критический | 9.1 | 0,95 % | 20.03.2025 | ||
| CVE-2024-8982 Local File Inclusion in bentoml/openllm bentoml / bentoml/openllm | Средний | 6.2 | 0,8 % | 20.03.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.