Lucene search
+L

1641 matches found

Wired Threat Level
Wired Threat Level
•added 2024/07/06 10:30 a.m.•16 views

Hackers Leaking Taylor Swift Tickets? Don’t Get Your Hopes Up

Plus: Researchers uncover a new way to expose CSAM peddlers, OpenAI suffered a secret cyberattack, cryptocurrency thefts jump in 2024, and Twilio confirms hackers stole 33 million phone numbers...

7.2AI score
SaveExploits0
NVD
NVD
•added 2024/07/06 5:15 a.m.•30 views

CVE-2024-40594

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

2.3CVSS0.00141EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/07/06 12:00 a.m.•35 views

CVE-2024-40594

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

2.3CVSS0.00141EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/07/06 12:00 a.m.•19 views

CVE-2024-40594

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

2.3CVSS5.9AI score0.00141EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/06 12:00 a.m.•12 views

CVE-2024-40594: Cleartext Storage of Sensitive Information

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

2.3CVSS5.9AI score0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/06 12:00 a.m.•75 views

CVE-2024-40594

The connected PT-2024-28930 entry confirms concrete details for CVE-2024-40594: the OpenAI ChatGPT macOS app prior to 2024-07-05 is vulnerable because it opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This creates a potential exposure of sens...

2.3CVSS5.9AI score0.00141EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/07/06 12:00 a.m.•21 views

OpenAI ChatGPT Security Breach

OpenAI ChatGPT is a text-based artificial intelligence assistant from OpenAI, Inc. Interaction takes place in the form of a dialog. A security vulnerability exists in versions of OpenAI ChatGPT prior to 2024-07-05 that stems from storing conversations in plaintext in a location accessible to othe...

2.3CVSS6.7AI score0.00141EPSS
SaveExploits0References3
HackRead
HackRead
•added 2024/07/05 4:17 p.m.•32 views

OpenAI Kept Mum About Hack of Sensitive AI Research

Security breach potentially exposed internal secrets at AI research firm OpenAI after hackers accessed discussions on sensitive AI…...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/07/05 12:00 a.m.•25 views

PT-2024-28930 · Openai · Openai Chatgpt

Name of the Vulnerable Software and Affected Versions: OpenAI ChatGPT app versions prior to 2024-07-05 for macOS Description: The issue concerns the OpenAI ChatGPT app for macOS, which opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This could...

2.3CVSS7AI score0.00141EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/07/01 3:53 p.m.•83 views

CVE-2024-36420 GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the /api/v1/openai-assistants-file endpoint in index.ts is vulnerable to arbitrary file read due to lack of sanitization of the fileName body parameter. No known patches for this...

7.5CVSS0.01776EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•9 views

CVE-2024-36420: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the /api/v1/openai-assistants-file endpoint in index.ts is vulnerable to arbitrary file read due to lack of sanitization of the fileName body parameter. No known patches for this...

7.5CVSS7.4AI score0.01776EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•19 views

PT-2024-26988

Name of the Vulnerable Software and Affected Versions Flowise version 1.4.3 Description The issue concerns a lack of sanitization of the fileName body parameter in the "/api/v1/openai-assistants-file" endpoint, which is located in the index.ts file. This lack of sanitization leads to an arbitrary...

8.7CVSS7.2AI score0.01776EPSS
SaveExploits4References10
CNNVD
CNNVD
•added 2024/07/01 12:00 a.m.•26 views

Flowise Security Vulnerabilities

Flowise is a tool for easily building LLM applications. A security vulnerability exists in Flowise version 1.4.3, which stems from a lack of cleanup of the fileName parameter, leaving /api/v1/openai-assistants-file in index.ts vulnerable to arbitrary file read attacks...

7.5CVSS7.3AI score0.01776EPSS
SaveExploits4References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:31 p.m.•8 views

Malicious code in TheOpenAI.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/06/25 1:30 p.m.•14 views

MAL-2024-4602 Malicious code in OpenAI-Core (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:30 p.m.•11 views

Malicious code in OpenAI-Core (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/06/25 1:30 p.m.•15 views

MAL-2024-4604 Malicious code in OpеnАI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/06/25 1:30 p.m.•13 views

MAL-2024-4605 Malicious code in Opеո.AI.Core (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:30 p.m.•9 views

Malicious code in OpеnАI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2024/06/24 11:04 a.m.•19 views

Paul Nakasone Joins OpenAI’s Board of Directors

Former NSA Director Paul Nakasone has joined the board of OpenAI...

7.3AI score
SaveExploits0
Rows per page
Query Builder