lfprojects kayıtları
lfprojects üreticisine ait 114 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %0,9
- Silahlaştırılmış
- 1 · %0,9
- Pre-auth RCE
- 22
- Düzeltme kaydı olan
- %82,5
- Yayından KEV’e ortanca
- 2 gün
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')17
- CWE-29 Path Traversal: '\..\filename'11
- CWE-502 Deserialization of Untrusted Data9
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-918 Server-Side Request Forgery (SSRF)5
- CWE-346 Origin Validation Error4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
114 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
70Bu hafta | CVE-2026-64849Silahlaştırılmış | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)lfprojects · mlflow · CWE-918 | Kritik9,3 | KEV | %9,8 | 17 Ağu 2026 |
64Bu hafta | CVE-2025-49844Kavram kanıtı | Redis Lua Use-After-Free may lead to remote code executionredis · redis · CWE-416 | Kritik9,9 | — | %82,3 | 3 Eki 2025 |
60Bu hafta | CVE-2023-1177Kavram kanıtı | Path Traversal: '\..\filename' in mlflow/mlflowlfprojects · mlflow · CWE-29 | Kritik9,8 | — | %69,7 | 24 Mar 2023 |
60Bu hafta | CVE-2023-3765Kavram kanıtı | Absolute Path Traversal in mlflow/mlflowlfprojects · mlflow · CWE-36 | Kritik10,0 | — | %67,6 | 18 Tem 2023 |
57Planlayın | CVE-2023-6909Kavram kanıtı | Path Traversal: '\..\filename' in mlflow/mlflowlfprojects · mlflow · CWE-29 | Yüksek7,5 | — | %89,7 | 18 Ara 2023 |
53Planlayın | CVE-2023-6018Kavram kanıtı | MLflow Arbitrary File Writelfprojects · mlflow · CWE-78 | Kritik9,8 | — | %47,9 | 16 Kas 2023 |
47Planlayın | CVE-2025-11201Kavram kanıtı | MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerabilitylfprojects · mlflow · CWE-22 | Kritik9,8 | — | %27,0 | 29 Eki 2025 |
43Planlayın | CVE-2024-3848Kavram kanıtı | Path Traversal Bypass in mlflow/mlflowlfprojects · mlflow · CWE-29 | Yüksek7,5 | — | %43,3 | 16 May 2024 |
41Planlayın | CVE-2023-43472Kavram kanıtı | An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.lfprojects · mlflow | Yüksek7,5 | — | %36,6 | 5 Ara 2023 |
41Planlayın | CVE-2023-2780Kavram kanıtı | Path Traversal: '\..\filename' in mlflow/mlflowlfprojects · mlflow · CWE-29 | Kritik9,8 | — | %6,4 | 17 May 2023 |
41Planlayın | CVE-2025-15379İstismar yok | Command Injection in mlflow/mlflowlfprojects · mlflow · CWE-77 | Kritik10,0 | — | %2,4 | 30 Mar 2026 |
40Planlayın | CVE-2026-0545Kavram kanıtı | Missing Authentication for Critical Function in mlflow/mlflowlfprojects · mlflow · CWE-306 | Kritik9,8 | — | %4,4 | 3 Nis 2026 |
40Planlayın | CVE-2023-6975İstismar yok | Path Traversal: '\..\filename'lfprojects · mlflow · CWE-29 | Kritik9,8 | — | %2,0 | 20 Ara 2023 |
40Planlayın | CVE-2025-15036İstismar yok | Path Traversal Vulnerability in mlflow/mlflowlfprojects · mlflow · CWE-29 | Kritik10,0 | — | %0,6 | 29 Mar 2026 |
39İzleyin | CVE-2023-6974İstismar yok | Server-Side Request Forgery (SSRF)lfprojects · mlflow · CWE-918 | Kritik9,8 | — | %1,5 | 20 Ara 2023 |
39İzleyin | CVE-2025-11200İstismar yok | MLflow Weak Password Requirements Authentication Bypass Vulnerabilitylfprojects · mlflow · CWE-521 | Kritik9,8 | — | %1,5 | 29 Eki 2025 |
39İzleyin | CVE-2023-6014İstismar yok | MLflow Authentication Bypasslfprojects · mlflow · CWE-598 | Kritik9,8 | — | %1,2 | 16 Kas 2023 |
38İzleyin | CVE-2024-27132İstismar yok | Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.lfprojects · mlflow · CWE-79 | Kritik9,6 | — | %0,9 | 23 Şub 2024 |
38İzleyin | CVE-2024-27133İstismar yok | Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.lfprojects · mlflow · CWE-79 | Kritik9,6 | — | %0,7 | 23 Şub 2024 |
38İzleyin | CVE-2026-2611İstismar yok | Improper Origin Validation in mlflow/mlflowlfprojects · mlflow · CWE-346 | Kritik9,6 | — | %0,4 | 19 May 2026 |
37İzleyin | CVE-2024-2928Kavram kanıtı | Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflowlfprojects · mlflow · CWE-29 | Yüksek7,5 | — | %21,8 | 6 Haz 2024 |
37İzleyin | CVE-2024-3573İstismar yok | Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflowlfprojects · mlflow · CWE-29 | Kritik9,3 | — | %0,7 | 15 Nis 2024 |
36İzleyin | CVE-2024-0520Kavram kanıtı | Remote Code Execution due to Full Controlled File Write in mlflow/mlflowlfprojects · mlflow · CWE-22 | Yüksek8,8 | — | %2,4 | 6 Haz 2024 |
36İzleyin | CVE-2025-15031İstismar yok | Path Traversal Vulnerability in mlflow/mlflowlfprojects · mlflow · CWE-22 | Kritik9,1 | — | %0,9 | 18 Mar 2026 |
36İzleyin | CVE-2026-2651İstismar yok | Missing Authorization Validation in mlflow/mlflowlfprojects · mlflow · CWE-862 | Kritik9,0 | — | %0,5 | 25 May 2026 |
- CVE-2026-6484970Bu hafta
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %10lfprojects · mlflow17 Ağu 2026
- CVE-2025-4984464Bu hafta
Redis Lua Use-After-Free may lead to remote code execution
KritikCVSS 9,9Kavram kanıtıEPSS %82redis · redis3 Eki 2025
- CVE-2023-117760Bu hafta
Path Traversal: '\..\filename' in mlflow/mlflow
KritikCVSS 9,8Kavram kanıtıEPSS %70lfprojects · mlflow24 Mar 2023
- CVE-2023-376560Bu hafta
Absolute Path Traversal in mlflow/mlflow
KritikCVSS 10,0Kavram kanıtıEPSS %68lfprojects · mlflow18 Tem 2023
- CVE-2023-690957Planlayın
Path Traversal: '\..\filename' in mlflow/mlflow
YüksekCVSS 7,5Kavram kanıtıEPSS %90lfprojects · mlflow18 Ara 2023
- CVE-2023-601853Planlayın
MLflow Arbitrary File Write
KritikCVSS 9,8Kavram kanıtıEPSS %48lfprojects · mlflow16 Kas 2023
- CVE-2025-1120147Planlayın
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %27lfprojects · mlflow29 Eki 2025
- CVE-2024-384843Planlayın
Path Traversal Bypass in mlflow/mlflow
YüksekCVSS 7,5Kavram kanıtıEPSS %43lfprojects · mlflow16 May 2024
- CVE-2023-4347241Planlayın
An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.
YüksekCVSS 7,5Kavram kanıtıEPSS %37lfprojects · mlflow5 Ara 2023
- CVE-2023-278041Planlayın
Path Traversal: '\..\filename' in mlflow/mlflow
KritikCVSS 9,8Kavram kanıtıEPSS %6lfprojects · mlflow17 May 2023
- CVE-2025-1537941Planlayın
Command Injection in mlflow/mlflow
KritikCVSS 10,0İstismar yokEPSS %2lfprojects · mlflow30 Mar 2026
- CVE-2026-054540Planlayın
Missing Authentication for Critical Function in mlflow/mlflow
KritikCVSS 9,8Kavram kanıtıEPSS %4lfprojects · mlflow3 Nis 2026
- CVE-2023-697540Planlayın
Path Traversal: '\..\filename'
KritikCVSS 9,8İstismar yokEPSS %2lfprojects · mlflow20 Ara 2023
- CVE-2025-1503640Planlayın
Path Traversal Vulnerability in mlflow/mlflow
KritikCVSS 10,0İstismar yokEPSS %1lfprojects · mlflow29 Mar 2026
- CVE-2023-697439İzleyin
Server-Side Request Forgery (SSRF)
KritikCVSS 9,8İstismar yokEPSS %2lfprojects · mlflow20 Ara 2023
- CVE-2025-1120039İzleyin
MLflow Weak Password Requirements Authentication Bypass Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1lfprojects · mlflow29 Eki 2025
- CVE-2023-601439İzleyin
MLflow Authentication Bypass
KritikCVSS 9,8İstismar yokEPSS %1lfprojects · mlflow16 Kas 2023
- CVE-2024-2713238İzleyin
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
KritikCVSS 9,6İstismar yokEPSS %1lfprojects · mlflow23 Şub 2024
- CVE-2024-2713338İzleyin
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.
KritikCVSS 9,6İstismar yokEPSS %1lfprojects · mlflow23 Şub 2024
- CVE-2026-261138İzleyin
Improper Origin Validation in mlflow/mlflow
KritikCVSS 9,6İstismar yokEPSS %0lfprojects · mlflow19 May 2026
- CVE-2024-292837İzleyin
Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow
YüksekCVSS 7,5Kavram kanıtıEPSS %22lfprojects · mlflow6 Haz 2024
- CVE-2024-357337İzleyin
Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow
KritikCVSS 9,3İstismar yokEPSS %1lfprojects · mlflow15 Nis 2024
- CVE-2024-052036İzleyin
Remote Code Execution due to Full Controlled File Write in mlflow/mlflow
YüksekCVSS 8,8Kavram kanıtıEPSS %2lfprojects · mlflow6 Haz 2024
- CVE-2025-1503136İzleyin
Path Traversal Vulnerability in mlflow/mlflow
KritikCVSS 9,1İstismar yokEPSS %1lfprojects · mlflow18 Mar 2026
- CVE-2026-265136İzleyin
Missing Authorization Validation in mlflow/mlflow
KritikCVSS 9,0İstismar yokEPSS %1lfprojects · mlflow25 May 2026