13568 matches found
MINI-24XH-GC49-H4JX
Bulletin has no description...
MINI-W87M-P35J-58R2
Bulletin has no description...
MINI-996X-GHW7-Q862
Bulletin has no description...
MINI-95V2-9MGR-GHGC
Bulletin has no description...
MINI-GM38-35MG-H5R6
Bulletin has no description...
MINI-X37P-G9R5-8JPJ
Bulletin has no description...
MINI-X57C-38CM-9P75
Bulletin has no description...
MINI-X8MW-PRXW-H82W
Bulletin has no description...
MINI-4MP5-RJ2P-J2Q2
Bulletin has no description...
MINI-J535-7C3P-6QR6
Bulletin has no description...
MINI-52CM-6C68-JJW3
Bulletin has no description...
MINI-JCV9-348R-CM4G
Bulletin has no description...
MLflow Is Vulnerable To An Authorization Bypass Affecting The AJAX Endpoint
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to...
Command Injection
Overview aws-mcp is an AWS Model Context Protocol Server Affected versions of this package are vulnerable to Command Injection via improper validation of user-supplied input in the allowed commands process. An attacker can execute arbitrary system commands by supplying crafted input that is used ...
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service developed by Alexei Ledenev. It enables AI assistants to execute AWS CLI commands through the Model Context Protocol MCP in a secure, containerized environment. aws-mcp-server has an operating system command injection vulnerability, which stems from...
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service developed by Alexei Ledenev. It enables AI assistants to execute AWS CLI commands through the Model Context Protocol MCP in a secure, containerized environment. aws-mcp-server has an operating system command injection vulnerability, which stems from...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization via the CloudSpec method on the Controller facade. An attacker can obtain sensitive cloud credentials by making an authenticated API call with only basic login permissions, without requiring elevated privileges...
GHSA-W5FQ-8965-C969 Juju: CloudSpec method leaking cloud credentials
Impact If a user has login permission to a controller and knows the controller model UUID, they can call the CloudSpec method on the Controller facade and get cloud credentials used to bootstrap the controller. The CloudSpec API is called by workers running in the controller to maintain connectio...
Missing Authentication for Critical Function
Overview n8n-mcp is an Integration between n8n workflow automation and Model Context Protocol MCP Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to missing authentication in several HTTP transport endpoints and exposure of sensitive operationa...
