Lucene search
+L

9 matches found

OSV
OSV
•added 2026/07/07 2:34 p.m.•19 views

PYSEC-2026-1628 MindsDB Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

9CVSS6.1AI score0.00506EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-2700

Malicious code in bioql PyPI...

9CVSS6.4AI score0.00506EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/05 3:29 a.m.•18 views

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

9CVSS5.9AI score0.00506EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2024/09/12 3:33 p.m.•23 views

MindsDB Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

9CVSS5.9AI score0.00506EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/09/12 1:15 p.m.•13 views

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

5.4CVSS5.9AI score0.00506EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/12 1:15 p.m.•41 views

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

9CVSS0.00506EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/12 1:05 p.m.•12 views

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

9CVSS6AI score0.00506EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/12 1:05 p.m.•51 views

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

9CVSS0.00506EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/12 12:00 a.m.•14 views

PT-2024-31813

Name of the Vulnerable Software and Affected Versions: MindsDB affected versions not specified Description: A cross-site scripting XSS issue exists, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScrip...

9CVSS6.1AI score0.00506EPSS
SaveExploits1References12
Rows per page
Query Builder