Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Llava CRITICAL 9.3
CVE-2024-9309

A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in haotian-li…

No fix yet
Fix from $2,300 2025-03-20
Llava MEDIUM 6.1
CVE-2024-9308

An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrar…

No fix yet
Fix from $1,600 2025-03-20
Large Language And Vision Assistant MEDIUM 6.1
CVE-2024-9311

A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker to upload files with malicious content w…

No fix yet
Fix from $1,600 2025-03-20
Llava HIGH 7.5
CVE-2024-12068

A Server-Side Request Forgery (SSRF) vulnerability was discovered in haotian-liu/llava, affecting version git c121f04. This vulnerability allows an a…

No fix yet
Fix from $1,950 2025-03-20
Large Language And Vision Assistant HIGH 7.5
CVE-2024-12070

A Denial of Service (DoS) vulnerability exists in the file upload feature of haotian-liu/llava, specifically in Release v1.2.0 (LLaVA-1.6). The vulne…

No fix yet
Fix from $1,950 2025-03-20
Llava HIGH 7.5
CVE-2024-12065

A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the s…

No fix yet
Fix from $1,950 2025-03-20
Large Language And Vision Assistant HIGH 7.5
CVE-2024-11449

A vulnerability in haotian-liu/llava version 1.2.0 (LLaVA-1.6) allows for Server-Side Request Forgery (SSRF) through the /run/predict endpoint. An at…

No fix yet
Fix from $1,950 2025-03-20
Llava HIGH 7.5
CVE-2024-10225

A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS) by appending a large number of characters to the en…

No fix yet
Fix from $1,950 2025-03-20