CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0. |
| 01/08/2023 |
| CVE-2023-3765 | CRÍTICO10.0 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. | 19/07/2023 |
| CVE-2023-2780 | CRÍTICO9.8 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. | 17/05/2023 |
| CVE-2023-30172 | ALTO7.5 | A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter. | 11/05/2023 |
| CVE-2023-2356 | ALTO7.5 | Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. | 28/04/2023 |
| CVE-2023-1177 | CRÍTICO9.8 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
| 24/03/2023 |
| CVE-2023-1176 | BAIXO3.3 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. | 24/03/2023 |
| CVE-2022-0736 | ALTO7.5 | Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. | 23/02/2022 |