| Reporter | Title | Published | Views | Family All 22 |
|---|---|---|---|---|
 | H2O Resource Management Error Vulnerability | 20 Mar 202500:00 | – | cnnvd |
 | CVE-2024-10572 Denial of Service and Arbitrary File Write in h2oai/h2o-3 | 20 Mar 202510:09 | – | cvelist |
 | EUVD-2025-7098 | 3 Oct 202520:07 | – | euvd |
 | H2O Vulnerable to Denial of Service (DoS) and File Write | 20 Mar 202512:32 | – | github |
 | H2O Vulnerable to Denial of Service (DoS) and File Write | 20 Mar 202500:00 | – | gitlab |
 | CVE-2024-10572 | 20 Mar 202510:09 | – | mend |
 | CVE-2024-10572 | 20 Mar 202510:15 | – | nvd |
 | GHSA-WJPV-64V2-2QPQ H2O Vulnerable to Denial of Service (DoS) and File Write | 20 Mar 202512:32 | – | osv_ghsa |
| PYSEC-2026-1444 H2O Vulnerable to Denial of Service (DoS) and File Write | 7 Jul 202614:34 | – | osv_pysec |
 | PT-2025-12048 | 20 Mar 202500:00 | – | ptsecurity |
10
[
{
"vendor": "h2oai",
"product": "h2oai/h2o-3",
"versions": [
{
"version": "unspecified",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "latest"
}
]
}
]| Source | Link |
|---|---|
| huntr | www.huntr.com/bounties/db8939a0-9be8-4d0f-a8b0-1bd181666da2 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| command | request body | /run_tool | The run_tool command allows execution of tools where the ast parser exposes classes in the water.tools package, specifically XGBoostLibExtractTool, leading to DoS and arbitrary file writes. | CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 06:55Current
7.4High risk
Vulners AI Score7.4
CVSS 37.5
EPSS0.00688
SSVC