94 matches found
CVE-2023-2356
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356
CVE-2023-2356 is a Relative Path Traversal flaw in mlflow/mlflow before 2.3.1. The connected sources (Nuclei template, OSV entries, GHSA advisories) describe a vulnerability allowing traversal to read sensitive server files (LFI) via a crafted path. Affected software: mlflow/mlflow, versions prio...
CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
SUSE CVE-2005-2355
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2335, CVE-2005-2356. Reason: due to a typo in an advisory, this candidate was accidentally referenced. Notes: All CVE users should consult CVE-2005-2335 and CVE-2005-2356 to determine the appropriate identifier for the issue...
CVE-2022-2356
creationtimestamp| type| source ---|---|--- 2022-08-08 18:23:52+00:00| seen| https://t.me/cibsecurity/47739...
CVE-2022-2356
The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded...
CVE-2022-2356
CVE-2022-2356 affects the WordPress plugin Frontend File Manager & Sharing prior to version 1.1.3. The root cause is lack of file-extension filtering during uploads, enabling potential upload of malicious code. Documented impact indicates an attacker could place executable code on the server, wit...
CVE-2022-2356 User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded...
SUSE: Security Advisory (SUSE-SU-2022:2356-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : curl (SUSE-SU-2022:2356-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2356-1 advisory. - When curl 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a...
CVE-2021-2356 affecting package mysql for versions less than 8.0.28-1
CVE-2021-2356 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...
Amazon Linux AMI : mysql57 (ALAS-2021-1544)
The version of mysql57 installed on the remote host is prior to 5.7.35-1.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1544 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are...
Medium: mysql57
Issue Overview: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
Fedora: Security Advisory for community-mysql (FEDORA-2021-df40c41094)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-2356 affecting package mysql 8.0.24-1
CVE-2021-2356 affecting package mysql 8.0.24-1. An upgraded version of the package is available that resolves this issue...
Photon OS 2.0: Mysql PHSA-2021-2.0-0381
An update of the mysql package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0381. The text itself is copyright C VMware, Inc...
Photon OS 1.0: Mysql PHSA-2021-1.0-0427
An update of the mysql package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0427. The text itself is copyright C VMware, Inc...
Oracle MySQL Server <= 5.7.34 / 8.0 <= 8.0.25 Security Update (cpujul2021) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...