ml-boden.de Improper Access Control vulnerability OBB-3767640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aadetools (>=0.0.3, <=0.0.5), adversarial-insight-ml (0.1.0) +328 more potentially affected by CVE-2023-5752 via pip (>=1.5.6, <=23.2.1)

pip PYPI version =1.5.6, =0.0.3, =2.0.0, =0.1.2, =0.0.1.dev0, =1.8.15, =1.8.17, =0.1.0, =0.2.3, =1.8.14, =2022.7.7b1, =2.0.3, =1.2.0, =1.3.0 - ak-sw-benchmarker 0.0.9 and more Source cves: CVE-2023-5752 Source advisory: MEND:CVE-2023-5752...

aaronblaser-sdk (>=1.0.0, <=1.0.1), actoolkit (>=2.6.4, <=2.6.10) +258 more potentially affected by CVE-2023-45803 via urllib3 (>=2.0.0, <=2.0.6)

urllib3 PYPI version =2.0.0, =1.0.0, =2.6.4, =0.0.1, =0.1.1, =0.5.0, =0.1.23, =0.4.3, =0.0.1b0, =0.0.12, =0.0.14 - annual-report 0.1.0 and more Source cves: CVE-2023-45803 Source advisory: OSV:GHSA-G4MX-Q9VG-27P4...

ml-servicebuero.de Cross Site Scripting vulnerability OBB-3732051

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

azure-ai-ml (>=0.1.0b1, <=0.1.0b7), beep (>=2020.12.22.14, <=2021.3.30.9) +3 more potentially affected by CVE-2023-26145 via pydash (4.9.0)

pydash PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - azure-ai-ml =0.1.0b1, =2020.12.22.14, =0.0.3, =0.0.6 Source cves: CVE-2023-26145 Source advisory: OSV:GHSA-8MJR-6C96-39W8...

azure-ai-ml (>=0.1.0b1, <=0.1.0b7), beep (>=2020.12.22.14, <=2021.3.30.9) +3 more potentially affected by CVE-2023-26145 via pydash (4.9.0)

pydash PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - azure-ai-ml =0.1.0b1, =2020.12.22.14, =0.0.3, =0.0.6 Source cves: CVE-2023-26145 Source advisory: OSV:PYSEC-2023-179...

Learn How Your Business Data Can Amplify Your AI/ML Threat Detection Capabilities

In today's digital landscape, your business data is more than just numbers—it's a powerhouse. Imagine leveraging this data not only for profit but also for enhanced AI and Machine Learning ML threat detection. For companies like Comcast, this isn't a dream. It's reality. Your business comprehends...

AI is the Solution, Not the Problem

AI is the Solution, Not the Problem By Trellix · August 07, 2023 This story was also written by Oded Margalit. AI Artificial Intelligence / ML Machine Learning has recently been painted as the master evil. In this blog I would like to suggest a different view, where we can use it to make a better...

CVE-2023-38699

The CVE-2023-38699 entry concerns MindsDB’s AI Virtual Database prior to 23.7.4.0, where calling requests with verify=False disables SSL certificate checks. The issue is resolved in 23.7.4.0, where SSL certificate verification becomes the default. Affected component: the MindsDB AI Virtual Databa...

ml-flu.children.jp Cross Site Scripting vulnerability OBB-3566653

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-4033 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-4033 Source advisory: OSV:GHSA-FFW3-6378-CQGP...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2023-4033 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2023-4033 Source advisory: OSV:GHSA-FFW3-6378-CQGP...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2023-4033 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2023-4033 Source advisory: OSV:PYSEC-2023-280...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-4033 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-4033 Source advisory: OSV:PYSEC-2023-280...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: GHSA-HHR9-RH25-HVF9...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-3765 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-3765 Source advisory: OSV:GHSA-FMXJ-6H9G-6VW3...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2023-3765 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2023-3765 Source advisory: OSV:GHSA-FMXJ-6H9G-6VW3...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2023-3765 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2023-3765 Source advisory: OSV:PYSEC-2023-308...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-3765 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-3765 Source advisory: OSV:PYSEC-2023-308...

ml-flu.children.jp Cross Site Scripting vulnerability OBB-3507574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...