Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

86 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-6014	Modificada	Crítica (9.8)	1.2%	—	Lfprojects Mlflow	16/11/2023	17/6/2026	An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
CVE-2023-6018	Modificada	Crítica (9.8)	48%	💥 Exploit	Lfprojects Mlflow	16/11/2023	17/6/2026	An attacker can overwrite any file on the server hosting MLflow without any authentication.
CVE-2023-6015	Modificada	Alta (7.5)	4.4%	—	Lfprojects Mlflow	16/11/2023	17/6/2026	MLflow allowed arbitrary files to be PUT onto the server.
CVE-2023-4033	Modificada	Alta (7.8)	1.3%	—	Lfprojects Mlflow	1/8/2023	17/6/2026	OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
CVE-2023-3765	Modificada	Crítica (10)	68%	💥 Exploit	Lfprojects Mlflow	19/7/2023	17/6/2026	Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
CVE-2023-2780	Modificada	Crítica (9.8)	6.4%	💥 Exploit	Lfprojects Mlflow	17/5/2023	17/6/2026	Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
CVE-2023-30172	Modificada	Alta (7.5)	1.0%	—	Lfprojects Mlflow	11/5/2023	17/6/2026	A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
CVE-2023-2356	Modificada	Alta (7.5)	4.2%	💥 Exploit	Lfprojects Mlflow	28/4/2023	17/6/2026	Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
CVE-2023-1177	Modificada	Crítica (9.8)	70%	💥 Exploit	Lfprojects Mlflow	24/3/2023	17/6/2026	Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
CVE-2023-1176	Modificada	Baja (3.3)	0.58%	—	Lfprojects Mlflow	24/3/2023	17/6/2026	Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
CVE-2022-0736	Modificada	Alta (7.5)	1.6%	—	Lfprojects Mlflow	23/2/2022	17/6/2026	Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.