Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Mindsdb HIGH 7.5

CVE-2024-45855

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model …

No fix yet

Fix from $1,950 2024-09-12

Mindsdb MEDIUM 5.4

CVE-2024-45856

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a …

No fix yet

Fix from $1,600 2024-09-12

Mindsdb HIGH 8.8

CVE-2024-45852

Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbi…

No fix yet

Fix from $1,950 2024-09-12

Mindsdb HIGH 7.5

CVE-2024-45853

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model …

No fix yet

Fix from $1,950 2024-09-12

Mindsdb HIGH 7.5

CVE-2024-45854

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model …

No fix yet

Fix from $1,950 2024-09-12

Mindsdb MEDIUM 6.1

CVE-2024-3575

Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb

No fix yet

Fix from $1,600 2024-04-16