Lucene search
+L

29 matches found

Github Security Blog
Github Security Blog
added 2025/10/29 9:30 p.m.21 views

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...

9.8CVSS7.9AI score0.27032EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/29 7:37 p.m.3 views

CVE-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...

8.1CVSS7.5AI score0.27032EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/29 7:37 p.m.75 views

CVE-2025-11201

CVE-2025-11201 is a Directory Traversal leading to Remote Code Execution in MLflow Tracking Server. The flaw arises from improper validation of a user-supplied model file path, allowing an attacker to execute code with the service account via crafted paths over the network without authentication....

9.8CVSS8.3AI score0.27032EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/10/29 7:37 p.m.190 views

CVE-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...

8.1CVSS0.27032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/03 12:0 a.m.13 views

PT-2025-40608

Name of the Vulnerable Software and Affected Versions MLflow Tracking Server affected versions not specified Description The MLflow Tracking Server contains a directory traversal flaw that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for...

9.8CVSS7.6AI score0.27032EPSS
SaveExploits0References18
CNNVD
CNNVD
added 2023/01/10 12:0 a.m.12 views

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS6.8AI score0.00939EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/01/10 12:0 a.m.9 views

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS6.8AI score0.00929EPSS
SaveExploits0References4
Imperva Blog
Imperva Blog
added 2021/07/27 3:12 p.m.57 views

Machine Learning Testing for Data Scientists

In one software development project after another, it has been proven that testing saves time. Does this hold true for machine learning projects? Should data scientists write tests? Will it make their work better and/or faster? We believe the answer is YES! In this post we describe a full...

8.1AI score
SaveExploits0
n0where
n0where
added 2015/05/08 2:41 p.m.29 views

focused Web Crawler: ACHE

ACHE is a focused Web crawler that can be customized to search for pages the belong to a given topic or have a given property. To configure ACHE, you need to: define a topic of interest e.g., Ebola, terrorism, cooking recipes; create a model to detect Web pages that belong to this topic; and...

0.8AI score
SaveExploits0References2
Rows per page
Query Builder