MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

A vulnerability in the createmodelversion handler of mlflow/server/handlers.py in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a CreateModelVersion request includes the tag...

EUVD-2015-6264

Malware in sbrugna...

PT-2015-2349

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions 2.0.0343 through 4.18 Description The issue is related to the IPC channel in Cisco AnyConnect Secure Mobility Client, which lacks source-path validation. This allows local users to bypass intend...

CVE-2015-6322: Undefined Security Weakness

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.18 allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563...