PT-2024-9415 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: Ollama versions 0.3.14 and earlier Description: The issue is related to the disclosure of system data to unauthorized individuals. It can be exploited by a remote attacker to cause a denial of service. The vulnerability allows file existence...

Ollama 安全漏洞

Ollama is a large language model from the Ollama open source that can be started and run locally. A security vulnerability exists in Ollama versions prior to 0.1.47, which stems from the extractFromZipFile function being able to extract ZIP archive members outside of the parent directory...

PT-2024-7104 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: Ollama versions prior to 0.1.47 Description: The issue is related to the extractFromZipFile function in model.go of the Ollama system, which is used for launching and managing large language models LLM. This function has an incorrect...

Eleix Openhacker account registration and login component SQL injection vulnerability

Eleix Openhacker is an open source code hosting system. account registration and login component is one of the account registration and login component. A SQL injection vulnerability exists in the account registration and login component in Eleix Openhacker version 0.1.47. A remote attacker can...

Eleix Openhacker bank transactions component cross-site scripting vulnerability

Eleix Openhacker is an open source code hosting system. bank transactions component is one of the business management component. A cross-site scripting vulnerability exists in the bank transactions component of Eleix Openhacker version 0.1.47. A remote attacker can exploit this vulnerability to...

Cross site scripting

Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code execution in the browser...

CVE-2017-1000443

Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code execution in the browser...