NA - CVE-2024-45850 - An arbitrary code execution vulnerability...
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases...
NA - CVE-2024-45851 - An arbitrary code execution vulnerability...
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases...
NA - CVE-2024-45852 - Deserialization of untrusted data can occur in...
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
NA - CVE-2024-45853 - Deserialization of untrusted data can occur in...
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used...
NA - CVE-2024-45854 - Deserialization of untrusted data can occur in...
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a...
NA - CVE-2024-45855 - Deserialization of untrusted data can occur in...
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using...
NA - CVE-2024-45856 - A cross-site scripting (XSS) vulnerability...
A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project,...
NA - CVE-2024-45857 - Deserialization of untrusted data can occur in...
Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when...
Medium - CVE-2024-28990 - SolarWinds Access Rights Manager (ARM) was...
SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ...
Critical - CVE-2024-28991 - SolarWinds Access Rights Manager (ARM) was...
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service,...