5 matches found
CVE-2023-31847
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...
6.5CVSS6.9AI score0.00629EPSS
SaveExploits1References1
EUVD-2023-36138
Malicious code in bioql PyPI...
8.8CVSS8.5AI score0.006EPSS
SaveExploits0References1
CVE-2023-31848
davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...
8.8CVSS6.9AI score0.006EPSS
SaveExploits0References1
20