CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0. |
| 01/08/2023 |
| CVE-2023-3765 | 严重10.0 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. | 19/07/2023 |
| CVE-2023-2780 | 严重9.8 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. | 17/05/2023 |
| CVE-2023-30172 | 高危7.5 | A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter. | 11/05/2023 |
| CVE-2023-2356 | 高危7.5 | Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. | 28/04/2023 |
| CVE-2023-1177 | 严重9.8 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
| 24/03/2023 |
| CVE-2023-1176 | 低危3.3 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. | 24/03/2023 |
| CVE-2022-0736 | 高危7.5 | Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1. | 23/02/2022 |