2250 matches found
hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27134 via mlflow (1.29.0)
mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27134 Source advisory: OSV:GHSA-QPGC-W4MG-6V92...
hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27134 via mlflow (1.29.0)
mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27134 Source advisory: OSV:PYSEC-2024-224...
Rapid7 Extends AWS Support to Include Coverage for Newly-Launched Resource Control Policies (RCPs)
In today’s cloud-first world, security and innovation go hand-in-hand. Rapid7 is excited to announce our support for Amazon Web Services’ AWS new Resource Control Policies RCPs, a powerful tool designed to bolster security controls for organizations using AWS infrastructure. As a launch partner f...
AIOps - Revolutionizing Incident Management with Advanced Automation and LLM Integration
AIOps - Revolutionizing Incident Management with Advanced Automation and LLM Integration By Trellix · November 14, 2024 Contributed by Chalapathy Jampal, Siddhesh Shinde, Alagiri Annadurai, Lakshmi Ram Teja Eluri and Anil Pokhrel Managing infrastructure and applications across a complex IT...
auto-ml (>=2.9.0, <=2.9.10), automl (>=2.9.0, <=2.9.9) +3 more potentially affected by CVE-2024-43598 via lightgbm (2.0.12)
lightgbm PYPI version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - auto-ml =2.9.0, =2.9.0, =0.0.1, =0.1.0, =1.0.1 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...
cropgbm (1.1.4), orpheus-ml (>=1.0.0, <=1.0.3) potentially affected by CVE-2024-43598 via lightgbm (3.3.0)
lightgbm PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - cropgbm 1.1.4 - orpheus-ml =1.0.0, =1.0.3 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...
HPESBHF04736 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01079, Intel Xeon Processor with Intel SGX Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.3008-09-2024 HPE Alletra 4120 - Prior to 2.3008-09-2024 HPE Alletra 4140 - Prior to 2.3008-09-2024 HPE ProLiant DL110 Gen11 - Prior to...
CVE-2024-51573
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ersatzpole ML Responsive Audio player with playlist Shortcode mlr-audio allows Stored XSS.This issue affects ML Responsive Audio player with playlist Shortcode: from n/a through = 0.2...
CVE-2024-51573
CVE-2024-51573 describes a stored XSS in the WordPress plugin ML Responsive Audio player with playlist Shortcode . Affected versions are 0.2 and earlier ; the issue arises from improper neutralization of inputs during web page generation. The provided documents do not include a confirmed fix/patc...
CVE-2024-51573: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ersatzpole ML Responsive Audio player with playlist Shortcode mlr-audio allows Stored XSS.This issue affects ML Responsive Audio player with playlist Shortcode: from n/a through = 0.2...
AI Industry is Trying to Subvert the Definition of “Open Source AI”
The Open Source Initiative has published news article here its definition of "open source AI," and it's terrible. It allows for secret training data and mechanisms. It allows for development to be done in secret. Since for a neural network, the training data is the source code--it's how the model...
CVE-2024-38403
Transient DOS while parsing BTM ML IE when per STA profile is not included...
CVE-2024-38403 Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included...
CVE-2024-38403 Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included...
CVE-2024-38403
CVE-2024-38403 affects Qualcomm closed‑source WLAN firmware components. It describes a transient denial‑of‑service that occurs when parsing the BTM ML IE if the per‑STA profile is not included. The entry assigns a high impact and network‑level exposure with low attack complexity and no user inter...
CVE-2024-38403: Buffer Over-read
Transient DOS while parsing BTM ML IE when per STA profile is not included...
WordPress ML Responsive Audio plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ML Responsive Audio player with playlist Shortcode versions = 0.2...
Researchers Uncover Vulnerabilities in Open-Source AI and ML Models
A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence AI and machine learning ML models, some of which could lead to remote code execution and information theft. The flaws, identified in tools like ChuanhuChatGPT, Lunary, and LocalAI...
Reducing False Positives in API Security: Advanced Techniques Using Machine Learning
False positives in API security are a serious problem, often resulting in wasted results and time, missing real threats, alert fatigue, and operational disruption. Fortunately, however, emerging technologies like machine learning ML can help organizations minimize false positives and streamline t...
