WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor lfprojects✕
Overview 114 matches · 2 in Waratek scope · 0 protected · 10 exploited · 1 CISA KEV · 21 public PoC · 5 EPSS ≥ 0.5
114matches 2in Waratek scope1.8% 0protected0.0% 10exploited8.8% 1CISA KEV0.9% 21public PoC18.4% 5EPSS ≥ 0.54.4%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 1.8% Outside Waratek scope 0 0.0% Not applicable 112 98.2% Withdrawn CVE 0 0.0%
Critical 21 18.4% High 69 60.5% Medium 19 16.7% Low 5 4.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 114 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 10 8.8% Working exploit published 11 9.6% Proof of concept only 47 41.2% Forecast only 0 0.0% No public exploit 46 40.4%
split by peak 21 / quarter
Not applicable: 112No exploit published: 2 Low: 5Medium: 19High: 69Critical: 21 not blocked: 114 No public exploit: 46Proof of concept only: 47Working exploit published: 11Exploited: 10
Q1 221 Not applicable1 High1 not blocked1 No public exploit1 Q2 220 Q3 220 Q4 220 Q1 234 Not applicable4 Critical2 High1 Low1 not blocked4 Exploited1 Proof of concept only2 No public exploit1 Q2 234 Not applicable4 Critical1 High3 not blocked4 Exploited1 Working exploit published1 No public exploit2 Q3 233 Not applicable3 Critical1 High1 Medium1 not blocked3 Working exploit published1 Proof of concept only1 No public exploit1 Q4 2314 Not applicable14 Critical4 High9 Medium1 not blocked14 Exploited1 Working exploit published5 Proof of concept only3 No public exploit5 Q1 245 Not applicable5 Critical2 High2 Low1 not blocked5 Proof of concept only5 Q2 2421 Not applicable21 Critical1 High18 Medium2 not blocked21 Exploited1 Working exploit published2 Proof of concept only11 No public exploit7 Q3 240 Q4 241 Not applicable1 High1 not blocked1 No public exploit1 Q1 255 Not applicable5 High3 Medium2 not blocked5 Working exploit published1 Proof of concept only4 Q2 251 Not applicable1 High1 not blocked1 No public exploit1 Q3 250 Q4 259 Not applicable9 Critical3 High2 Medium4 not blocked9 Exploited2 No public exploit7 Q1 2621 No exploit published1 Not applicable20 Critical3 High15 Medium3 not blocked21 Proof of concept only8 No public exploit13 Q2 2620 No exploit published1 Not applicable19 Critical3 High8 Medium6 Low3 not blocked20 Exploited3 Working exploit published1 Proof of concept only12 No public exploit4 Q3 265 Not applicable5 Critical1 High4 not blocked5 Exploited1 Proof of concept only1 No public exploit3
Q1 22Q3 22Q1 23Q3 23Q1 24Q3 24Q1 25Q3 25Q1 26Q3 26
114 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2023-6015 High 2023-11-16 Not applicable No public exploit MLflow allowed arbitrary files to be PUT onto the server.
CVE-2023-6014 Critical 2023-11-16 Not applicable Proof of concept only An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
CVE-2023-4033 High 2023-08-01 Not applicable Proof of concept only OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
CVE-2023-38496 Medium 2023-07-25 Not applicable No public exploit Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1.
CVE-2023-3765 Critical 2023-07-19 Not applicable Working exploit published Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
CVE-2023-2780 Critical 2023-05-17 Not applicable Working exploit published Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
CVE-2023-30172 High 2023-05-11 Not applicable No public exploit A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
CVE-2023-2356 High 2023-04-28 Not applicable Exploited Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
CVE-2023-30549 High 2023-04-25 Not applicable No public exploit Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and installations that include apptainer-suid < 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterprise Linux 7, Debian 10 buster (unless the linux-5.10 package is installed), Ubuntu 18.04 bionic and Ubuntu 20.04 focal. Use-after-free flaws in the kernel can be used to attack the kernel for denial of service and potentially for privilege escalation. Apptainer 1.1.8 includes a patch that by default disables mounting of extfs filesystem types in setuid-root mode, while continuing to allow mounting of extfs filesystems in non-setuid "rootless" mode using fuse2fs. Some workarounds are possible. Either do not install apptainer-suid (for versions 1.1.0 through 1.1.7) or set `allow setuid = no` in apptainer.conf. This requires having unprivileged user namespaces enabled and except for apptainer 1.1.x versions will disallow mounting of sif files, extfs files, and squashfs files in addition to other, less significant impacts. (Encrypted sif files are also not supported unprivileged in apptainer 1.1.x.). Alternatively, use the `limit containers` options in apptainer.conf/singularity.conf to limit sif files to trusted users, groups, and/or paths, and set `allow container extfs = no` to disallow mounting of extfs overlay files. The latter option by itself does not disallow mounting of extfs overlay partitions inside SIF files, so that's why the former options are also needed.
CVE-2022-46397 High 2023-03-28 Not applicable No public exploit FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.
CVE-2023-1177 Critical 2023-03-24 Not applicable Exploited Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
CVE-2023-1176 Low 2023-03-24 Not applicable Proof of concept only Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
CVE-2023-23619 Critical 2023-01-26 Not applicable Proof of concept only Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue has been partially mitigated in version 1.0.0, with the maintainer's GitHub Security Advisory (GHSA) noting "It is impossible to fully guard against this, because users have access to the original raw information. However, as of version 1, if you only access the constrained models, you will not encounter this issue. Further similar situations are NOT seen as a security issue, but intended behavior." The suggested workaround from the maintainers is "Fully custom presets that change the entire rendering process which can then escape the user input."
CVE-2022-0736 High 2022-02-23 Not applicable No public exploit Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
‹ prev page 2 of 2 next ›