Lucene search
K

CVE-2024-6960 H2O deserializes ML models without filtering, potentially allowing execution of malicious code

πŸ—“οΈΒ 21 Jul 2024Β 09:55:20Reported byΒ JFROGTypeΒ 
cvelist
Β cvelist
πŸ”—Β www.cve.orgπŸ‘Β 22Β Views

H2O ML platform vulnerability allows deserialization of malicious cod

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of the Iced training platform’s classes allows a hacker to execute arbitrary code.
14 Mar 202500:00
–bdu_fstec
Circl
CVE-2024-6960
21 Jul 202412:32
–circl
CVE
CVE-2024-6960
21 Jul 202409:55
–cve
EUVD
EUVD-2024-2430
3 Oct 202520:07
–euvd
Github Security Blog
H2O vulnerable to Deserialization of Untrusted Data
21 Jul 202412:30
–github
GitLab Advisory Database
H2O vulnerable to Deserialization of Untrusted Data
21 Jul 202400:00
–gitlab
NVD
CVE-2024-6960
21 Jul 202410:15
–nvd
OSV
GHSA-W36W-948J-XHFW H2O vulnerable to Deserialization of Untrusted Data
21 Jul 202412:30
–osv
Positive Technologies
PT-2024-37999 Β· H2O Β· H2O
10 Jun 202400:00
–ptsecurity
RedhatCVE
CVE-2024-6960
5 Feb 202503:06
–redhatcve
Rows per page
[
  {
    "collectionURL": "https://mvnrepository.com",
    "defaultStatus": "unaffected",
    "packageName": "ai.h2o:h2o-core",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation