912 matches found
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the mlflow server or mlflow ui commands using an MLflow version older than MLflow 2.3.1 may be vulnerable to a remote file access exploit if they are not limiting who can query their server for example,...
Relative path traversal in mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
PYSEC-2023-68
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
PYSEC-2023-68
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
PT-2023-19040 · Mlflow · Mlflow
Name of the Vulnerable Software and Affected Versions: mlflow versions prior to 2.3.1 Description: The issue is related to a Relative Path Traversal in the GitHub repository mlflow/mlflow. Recommendations: For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue...
Mlflow 安全漏洞
Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow versions prior to 2.3.1. An attacker exploiting this vulnerability could access files and directories stored outside of the web root folder...
PYSEC-2023-41
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export a non-default feature. Users were able to upload crafted HTML documents that trigger the reading of arbitrary files...
PYSEC-2023-40
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export a non-default feature. Organizers can trigger the overwriting with the standard pretalx 404 page content of an arbitrary file...
PT-2023-21731 · Pretalx · Pretalx
Name of the Vulnerable Software and Affected Versions: pretalx versions 2.3.1 through 2.3.1 Description: The issue allows path traversal in HTML export, a non-default feature. Organizers can trigger the overwriting of an arbitrary file with the standard pretalx 404 page content. Recommendations:...
CVE-2023-28459
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export a non-default feature. Users were able to upload crafted HTML documents that trigger the reading of arbitrary files...
SUSE CVE-2019-14690
AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp...
SUSE CVE-2019-14733
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load in rad.cpp...
SUSE CVE-2019-15151
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h...
PT-2023-15049 · WordPress · Wp Trio Conditional Shipping For Woocommerce
Name of the Vulnerable Software and Affected Versions: Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin versions = 2.3.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which can lead to the activation or deactivation of plugin rulesets...
PT-2023-10630 · Instedd · Instedd Pollit
Name of the Vulnerable Software and Affected Versions: InSTEDD Pollit version 2.3.1 Description: A critical issue affects the TourController function of the file app/controllers/tour controller.rb. The manipulation leads to an unknown weakness, and the attack may be initiated remotely. Upgrading ...
SUSE CVE-2007-4575
HSQLDB before 1.8.0.9, as used in OpenOffice.org OOo 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."...