NuGet Package 'Microsoft.ML.LightGbm' Detection

The remote host has a 'Microsoft.ML.LightGbm' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

NuGet Package 'Microsoft.ML.FastTree' Detection

The remote host has a 'Microsoft.ML.FastTree' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

NuGet Package 'Microsoft.ML.CpuMath' Detection

The remote host has a 'Microsoft.ML.CpuMath' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

NuGet Package 'Microsoft.ML.TensorFlow.Redist' Detection

The remote host has a 'Microsoft.ML.TensorFlow.Redist' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Malware in ml-translate-vis

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ml-translate-vis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fac763b65f8589de08fd31594652182e22966151af04e82dc7605d936b3189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

llvm-ir-dataset-utils (0.2.0), ml-compiler-opt (>=0.0.1.dev202306210145, <=0.0.1.dev202401270006) +4 more potentially affected by CVE-2024-8375 via dm-reverb (>=0.7.0, <=0.14.0)

dm-reverb PYPI version =0.7.0, =0.0.1.dev202306210145, =0.0.1, =0.4.4, =3.0.1, =0.0.1, =0.0.2 Source cves: CVE-2024-8375 Source advisory: GHSA-W69Q-W4H4-2FX8...

Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense

Google has announced that it will be switching from KYBER to ML-KEM in its Chrome web browser as part of its ongoing efforts to defend against the risk posed by cryptographically relevant quantum computers CRQCs. "Chrome will offer a key share prediction for hybrid ML-KEM codepoint 0x11EC," David...

Microsoft Is Adding New Cryptography Algorithms

Microsoft is updating SymCrypt, its core cryptographic library, with new quantum-secure algorithms. Microsofts details are here. From a news article: The first new algorithm Microsoft added to SymCrypt is called ML-KEM. Previously known as CRYSTALS-Kyber, ML-KEM is one of three post-quantum...

MindsDB Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

hyfi-ml (0.2.0), miso (>=3.1.0, <=3.1.25) +2 more potentially affected by CVE-2024-45857 via cleanlab (>=2.5.0, <=2.6.3)

cleanlab PYPI version =2.5.0, =3.1.0, =0.0.50, =0.0.51 Source cves: CVE-2024-45857 Source advisory: GHSA-8CM9-RRGC-4PCJ...

hyfi-ml (0.2.0), miso (>=3.1.0, <=3.1.25) +2 more potentially affected by CVE-2024-45857 via cleanlab (>=2.5.0, <=2.6.3)

cleanlab PYPI version =2.5.0, =3.1.0, =0.0.50, =0.0.51 Source cves: CVE-2024-45857 Source advisory: OSV:GHSA-8CM9-RRGC-4PCJ...

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

CVE-2024-45856

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

PT-2024-31813

Name of the Vulnerable Software and Affected Versions: MindsDB affected versions not specified Description: A cross-site scripting XSS issue exists, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScrip...

CVE-2024-45856: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...

fluoriclogppka (>=0.1.0, <=0.2.7), h2o-wave-ml (>=0.3.0, <=0.5.0) +7 more potentially affected by CVE-2024-45758 via h2o (>=3.18.0.8, <=3.46.0.7)

h2o PYPI version =3.18.0.8, =0.1.0, =0.3.0, =0.4.5, =1.0.0, =1.0.0, =3.0.1, =0.0.5, =0.0.1, =0.0.102 - tsanalysis 0.1.0 Source cves: CVE-2024-45758 Source advisory: OSV:GHSA-HRMC-JMP7-MPM2...

CBL Mariner 2.0 Security Update: python-pygments (CVE-2021-20270)

The version of python-pygments installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-20270 advisory. - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 May lead to denial of service when...