Lucene search
+L

6 matches found

CVE
CVE
•added 2026/11/03 11:45 p.m.•16 views

CVE-2026-118625

A missing authorization check in the get_endpoints function of the MLflow Tracking Server allows an authenticated remote attacker to escalate privileges. By triggering this functionality without proper permission checks, an attacker can gain unauthorized access to resources normally protected fro...

6.3CVSS6.6AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 11:45 p.m.•7 views

CVE-2026-118625 MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the getendpoints...

6.3CVSS
SaveExploits0References1
Mend
Mend
•added 2026/11/03 11:45 p.m.•0 views

CVE-2026-118625

MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the getendpoints...

6.3CVSS6.6AI score
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2026/10/29 12:00 a.m.•12 views

MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the getendpoints function. The issue results from the lack of authorization prior to allowing access to...

6.3CVSS6.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001582 advisory. The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference...

7.2CVSS6.2AI score0.00417EPSS
SaveExploits0References12
Mend
Mend
•added 2017/11/04 1:00 a.m.•6 views

CVE-2017-16532

The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS0.00417EPSS
SaveExploits0References11
Rows per page
Query Builder