Lucene search
K

27 matches found

OSV
OSV
added 2024/05/16 9:33 a.m.24 views

GHSA-PW38-XV9X-H8CH RunGptLLM class in LlamaIndex has a command injection

A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...

8.8CVSS9AI score0.01615EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2024/05/16 9:33 a.m.65 views

RunGptLLM class in LlamaIndex has a command injection

A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...

8.8CVSS8AI score0.01615EPSS
Exploits1References4Affected Software2
NVD
NVD
added 2024/05/16 9:15 a.m.20 views

CVE-2024-4181

A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...

8.8CVSS9.1AI score0.01615EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/05/16 9:3 a.m.22 views

CVE-2024-4181 Command Injection in run-llama/llama_index

A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...

8.8CVSS8AI score0.01615EPSS
Exploits1References2
CVE
CVE
added 2024/05/16 9:3 a.m.67 views

CVE-2024-4181

The CVE-2024-4181 issue affects llama_index (RunGptLLM class) version 0.9.47 used by RunGpt framework to connect to LLMs. Root cause: unsafe use of eval enabling a malicious or compromised LLM hosting provider to run arbitrary commands on a client machine. Impact statements in sources indicate th...

8.8CVSS7.9AI score0.01615EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/05/16 9:3 a.m.30 views

CVE-2024-4181 Command Injection in run-llama/llama_index

A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...

8.8CVSS9.2AI score0.01615EPSS
Exploits1References2
hackapp
hackapp
added 2016/04/01 10:22 a.m.12 views

Learn Turkish - 50 languages - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Learn Turkish - 50 languages published at the 'play' market has multiple vulnerabilities...

0.2AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:15 a.m.14 views

تعلم اللغة الالمانية بسرعة mp3 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application تعلم اللغة الالمانية بسرعة mp3 published at the 'play' market has multiple vulnerabilities...

0.5AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:58 a.m.9 views

Learn Turkish Words Free - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Turkish Words Free published at the 'play' market has multiple vulnerabilities...

0.5AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:58 a.m.7 views

Learn Russian - 50 languages - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Learn Russian - 50 languages published at the 'play' market has multiple vulnerabilities...

0.8AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:58 a.m.117 views

Learn a language Free - Mondly - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn a language Free - Mondly published at the 'play' market has multiple vulnerabilities...

1AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.11 views

Learn Albanian - 50 languages - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Learn Albanian - 50 languages published at the 'play' market has multiple vulnerabilities...

0.7AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.12 views

تعلم الالمانية بالاستماع فقط - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application تعلم الالمانية بالاستماع فقط published at the 'play' market has multiple vulnerabilities...

0.1AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.10 views

ترجم وتعلم اللغة الألمانية - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ترجم وتعلم اللغة الألمانية published at the 'play' market has multiple vulnerabilities...

0.5AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.17 views

Learn German fast & easy - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Learn German fast & easy published at the 'play' market has multiple vulnerabilities...

0.1AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.4 views

Learn Italian 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Learn Italian 6,000 Words published at the 'play' market has multiple vulnerabilities...

0.4AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.14 views

Learn Arabic 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Learn Arabic 6,000 Words published at the 'play' market has multiple vulnerabilities...

0.1AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.19 views

Learn German with Fabulo - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Learn German with Fabulo published at the 'play' market has multiple vulnerabilities...

7.2AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:57 a.m.12 views

Learn & Speak Japanese FREE - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn & Speak Japanese FREE published at the 'play' market has multiple vulnerabilities...

0.8AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:56 a.m.7 views

Learn Turkish with Babbel - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Learn Turkish with Babbel published at the 'play' market has multiple vulnerabilities...

0.1AI score
Exploits0References1Affected Software1
Rows per page
Query Builder