86 matches found
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +7979 more potentially affected by CVE-2022-40152 via com.fasterxml.woodstox:woodstox-core (>=5.0.0, <=5.3.0)
com.fasterxml.woodstox:woodstox-core MAVEN version =5.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +11239 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (>=9.0.0.m0, <=9.4.46.v20220331)
org.eclipse.jetty:jetty-http MAVEN version =9.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +593 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.3.0, <=3.3.1)
org.apache.hadoop:hadoop-common MAVEN version =3.3.0, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.8.5 and more Source cves: CVE-2021-37404 Source advisory: GHSA-RMPJ-7C96-MRG8...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +4634 more potentially affected by CVE-2017-7669 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.8.0)
org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2017-7669...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +3957 more potentially affected by CVE-2016-6811 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.7.3)
org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2016-6811...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +607 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=2.4.1, <=2.4.2)
net.minidev:json-smart MAVEN version =2.4.1, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.2.1, =0.3.0, =3.16.0 and more Source cves: CVE-2021-31684 Source advisory: GHSA-FG2V-W576-W4V3...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +27496 more potentially affected by CVE-2021-22569 via com.google.protobuf:protobuf-java (>=2.0.3, <=3.16.0)
com.google.protobuf:protobuf-java MAVEN version =2.0.3, =1.4.6, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2.10 and more Source cves: CVE-2021-22569 Source advisory: MEND:CVE-2021-22569...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23035 more potentially affected by CVE-2020-36179 via com.fasterxml.jackson.core:jackson-databind (>=2.0.0, <=2.6.7.4)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.0.0, =0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =13publish-0.0.12 and more Source cves:...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +9385 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=2.0, <=2.3)
net.minidev:json-smart MAVEN version =2.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.4...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.grakn:grakn-dist (>=0.10.0, <=0.15.0) +1892 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (3.10.5.final)
io.netty:netty MAVEN version 3.10.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =0.10.0, =0.10.0, =0.10.0, =0.15.0 - ai.grakn:migration-base 0.10.0 -...
ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (3.6.2.final)
io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.grakn.kgms:client (1.4.3) +4875 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (>=9.0.0.m0, <=9.4.32.v20200930)
org.eclipse.jetty:jetty-webapp MAVEN version =9.0.0.m0, =1.0.1, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b174...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +1548 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (4.41.1)
com.nimbusds:nimbus-jose-jwt MAVEN version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev,...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
Path traversal
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
UBUNTU-CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672: Improper Limitation of a Pathname to a Restricted Directory
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...