CVEs classified under CWE-76, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (7)
CVE-2024-2952 — CVSS 9.8 (critical): BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint. The vulnerability arises from the…
CVE-2024-34359 — CVSS 9.6 (critical): llama-cpp-python is the Python bindings for llama.cpp. `llama-cpp-python` depends on class `Llama` in `llama.py` to load `.gguf` llama.cpp…
CVE-2024-4897 — CVSS 8.4 (high): parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python…
CVE-2024-1882 — CVSS 7.2 (high): This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code…
CVE-2024-21600 — CVSS 6.5 (medium): An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS…
CVE-2023-1149 — CVSS 5.4 (medium): Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.
CVE-2024-1221 — CVSS 3.1 (low): This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the…