Lucene search
+L

47 matches found

RedhatCVE
RedhatCVE
•added 2026/03/31 9:21 p.m.•13 views

CVE-2025-15379

A flaw was found in MLflow. When deploying a model with envmanager=LOCAL, MLflow's model serving container initialization code, specifically the installmodeldependenciestoenv function, reads dependency specifications from the model artifact's pythonenv.yaml file. An attacker can supply a maliciou...

10CVSS6.2AI score0.02359EPSS
SaveExploits1References5
CNVD
CNVD
•added 2026/03/19 12:00 a.m.•15 views

Unspecified Vulnerability in HCL AION (CNVD-2026-15150)

HCL AION is an AI lifecycle management platform from HCL India. HCL AION has a security vulnerability that can be exploited by an attacker to cause the use of unvalidated or modified model artifacts...

5.3CVSS5.9AI score0.00084EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/16 2:39 p.m.•7 views

CVE-2025-52645

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour...

1.9CVSS5.8AI score0.00084EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/16 2:39 p.m.•9 views

CVE-2025-52645 HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour...

1.9CVSS5.9AI score0.00084EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/16 12:00 a.m.•14 views

PT-2026-25755

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour...

1.9CVSS5.8AI score0.00084EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•17 views

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION has a security vulnerability that can be exploited by an attacker to cause the use of unvalidated or modified model artifacts...

5.3CVSS5.8AI score0.00084EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•2 views

CVE-2025-52645: Insufficient Verification of Data Authenticity

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour...

5.3CVSS5.9AI score0.00084EPSS
SaveExploits0References1
Rows per page
Query Builder