modelscope/agentscope

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Remote Code Execution via Deserialization in modelscope/agentscopeCVE-2024-8502modelscope · CVSS 9.8 · 1.8% likely

   CWE-502

2. Directory Traversal in modelscope/agentscopeCVE-2024-8524modelscope · CVSS 7.5 · 1.2% likely

   CWE-22

3. Path Traversal in modelscope/agentscopeCVE-2024-8537modelscope · CVSS 9.1 · 1.0% likely

   CWE-29

4. Path Traversal in modelscope/agentscopeCVE-2024-8551modelscope · CVSS 9.1 · 1.0% likely

   CWE-23

5. Arbitrary File Download in modelscope/agentscopeCVE-2024-8501modelscope · CVSS 7.5 · 1.0% likely

   CWE-36

6. Path Traversal in modelscope/agentscopeCVE-2024-8438modelscope · CVSS 7.5 · 0.8% likely

   CWE-22

7. Local File Inclusion (LFI) in modelscope/agentscopeCVE-2024-8550modelscope · CVSS 7.5 · 0.5% likely

   CWE-497

8. Stored XSS in modelscope/agentscopeCVE-2024-8556modelscope · CVSS 6.1 · 0.4% likely

   CWE-79

9. CORS Vulnerability in modelscope/agentscopeCVE-2024-8487modelscope · CVSS 7.4 · 0.3% likely

   CWE-346

10. CSRF due to overly permissive CORS headers in modelscope/agentscopeCVE-2024-8489modelscope · CVSS 8.8 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.