Wallarm joins CNCF to promote Kubernetes security

Wallarm has recently joined the Linux Foundation and its sister organization, Cloud Native Computing Foundation. Wallarm will be contributing its AI/ML security expertise within the LF and CNCF communities to support the sustainability and adoption of open source technologies. Wallarm and its...

aws-ml-helper (0.0.0), bamboo-lib (>=0.0.37, <=0.0.39) +7 more potentially affected by CVE-2018-1000805 via paramiko (>=2.4.0, <=2.4.1)

paramiko PYPI version =2.4.0, =0.0.37, =0.0.3, =0.0.1, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2018-1000805 Source advisory: OSV:GHSA-F2J6-WRHH-V25M...

aws-ml-helper (0.0.0), bamboo-lib (>=0.0.37, <=0.0.39) +7 more potentially affected by CVE-2018-1000805 via paramiko (>=2.4.0, <=2.4.1)

paramiko PYPI version =2.4.0, =0.0.37, =0.0.3, =0.0.1, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2018-1000805 Source advisory: GHSA-F2J6-WRHH-V25M...

aws-ml-helper (0.0.0), bamboo-lib (>=0.0.37, <=0.0.39) +7 more potentially affected by CVE-2018-1000805 via paramiko (>=2.4.0, <=2.4.1)

paramiko PYPI version =2.4.0, =0.0.37, =0.0.3, =0.0.1, =0.0.1, =0.1.0, =0.2.1 Source cves: CVE-2018-1000805 Source advisory: MEND:CVE-2018-1000805...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

PT-2018-16218

Name of the Vulnerable Software and Affected Versions X-Pack Machine Learning versions prior to 6.2.4 X-Pack Machine Learning versions prior to 5.6.9 Description A cross-site scripting XSS issue was found. If an attacker can inject data into an index with a running ML job, they could obtain...

CVE-2018-3824: Improper Neutralization of Input During Web Page Generation

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: OSV:GHSA-232R-66CG-79PX...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: GHSA-232R-66CG-79PX...

sourced-ml (0.4.5) potentially affected by CVE-2018-1334 via pyspark (2.2.0.post0)

pyspark PYPI version 2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml 0.4.5 Source cves: CVE-2018-1334 Source advisory: OSV:PYSEC-2018-25...

sourced-ml (0.4.5) potentially affected by CVE-2018-1334 via pyspark (2.2.0.post0)

pyspark PYPI version 2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml 0.4.5 Source cves: CVE-2018-1334 Source advisory: MEND:CVE-2018-1334...

Investing in the right innovation

RSA is around the corner which means tens of thousands of people will descend on Moscone Center in San Francisco, CA. Hundreds of innovative young companies will look for customers, props, and capital especially at the Early Stage Expo!. Venture capitalists will look for opportunities to invest a...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: MEND:CVE-2018-7750...

WAP-billing Trojan-Clickers on rise

During the preparation of the "IT threat evolution Q2 2017" report I found several common Trojans in the "Top 20 mobile malware programs" list that were stealing money from users using WAP-billing - a form of mobile payment that charges costs directly to the user's mobile phone bill so they don't...

[SECURITY] Fedora 26 Update: ocaml-4.04.0-10.fc26

OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML family of languages. This package comprises two batch compilers a fast bytecode compiler and an optimizing native-code compiler, an interactive toplevel system, parsing tools Lex,Yacc, a replay...

CentOS 6 : ocaml (CESA-2017:0565)

An update for ocaml is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ml-interim.fr XSS vulnerability

Vulnerable URL: http://www.ml-interim.fr/jobs-modern-list/?jobtitle=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=induspharma=Trouver+un+poste Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...