Lucene search
+L

86 matches found

vulnersOsv
vulnersOsv
•added 2022/09/16 10:00 a.m.•1 views

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +7979 more potentially affected by CVE-2022-40152 via com.fasterxml.woodstox:woodstox-core (>=5.0.0, <=5.3.0)

com.fasterxml.woodstox:woodstox-core MAVEN version =5.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

7.5CVSS0.18215EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/07/07 8:55 p.m.•1 views

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +11239 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (>=9.0.0.m0, <=9.4.46.v20220331)

org.eclipse.jetty:jetty-http MAVEN version =9.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

4CVSS0.01324EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/06/14 12:00 a.m.•1 views

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +593 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.3.0, <=3.3.1)

org.apache.hadoop:hadoop-common MAVEN version =3.3.0, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.8.5 and more Source cves: CVE-2021-37404 Source advisory: GHSA-RMPJ-7C96-MRG8...

9.8CVSS0.02993EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/17 2:41 a.m.•1 views

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +4634 more potentially affected by CVE-2017-7669 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.8.0)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2017-7669...

8.5CVSS0.01795EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/14 3:24 a.m.•1 views

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +3957 more potentially affected by CVE-2016-6811 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.7.3)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2016-6811...

9CVSS0.0262EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/02/10 10:46 p.m.•2 views

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +607 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=2.4.1, <=2.4.2)

net.minidev:json-smart MAVEN version =2.4.1, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.2.1, =0.3.0, =3.16.0 and more Source cves: CVE-2021-31684 Source advisory: GHSA-FG2V-W576-W4V3...

7.5CVSS0.02281EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/01/07 12:00 a.m.•3 views

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +27496 more potentially affected by CVE-2021-22569 via com.google.protobuf:protobuf-java (>=2.0.3, <=3.16.0)

com.google.protobuf:protobuf-java MAVEN version =2.0.3, =1.4.6, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2.10 and more Source cves: CVE-2021-22569 Source advisory: MEND:CVE-2021-22569...

7.5CVSS6.7AI score0.01669EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/12/09 7:15 p.m.•2 views

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23035 more potentially affected by CVE-2020-36179 via com.fasterxml.jackson.core:jackson-databind (>=2.0.0, <=2.6.7.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.0.0, =0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =13publish-0.0.12 and more Source cves:...

8.8CVSS0.17065EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2021/06/16 6:03 p.m.•2 views

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +9385 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=2.0, <=2.3)

net.minidev:json-smart MAVEN version =2.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.4...

5.9CVSS0.02896EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/02/08 9:17 p.m.•3 views

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.grakn:grakn-dist (>=0.10.0, <=0.15.0) +1892 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (3.10.5.final)

io.netty:netty MAVEN version 3.10.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =0.10.0, =0.10.0, =0.10.0, =0.15.0 - ai.grakn:migration-base 0.10.0 -...

6.2CVSS0.01777EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2021/02/08 9:17 p.m.•3 views

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (3.6.2.final)

io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...

6.2CVSS0.01777EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2020/11/04 5:50 p.m.•1 views

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.grakn.kgms:client (1.4.3) +4875 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (>=9.0.0.m0, <=9.4.32.v20200930)

org.eclipse.jetty:jetty-webapp MAVEN version =9.0.0.m0, =1.0.1, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b174...

7CVSS0.04352EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2019/10/16 6:31 p.m.•2 views

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +1548 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (4.41.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev,...

9.8CVSS0.11121EPSS
SaveExploits0
NVD
NVD
•added 2019/08/15 6:15 p.m.•37 views

CVE-2018-14672

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5.3CVSS5.4AI score0.01741EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/08/15 6:15 p.m.•27 views

CVE-2018-14672

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5.3CVSS7.3AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/08/15 6:15 p.m.•28 views

CVE-2018-14672

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5.3CVSS6.2AI score0.01741EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/15 6:15 p.m.•38 views

Path traversal

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5CVSS5.4AI score0.01741EPSS
SaveExploits0References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2019/08/15 6:15 p.m.•20 views

UBUNTU-CVE-2018-14672

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5.3CVSS6.1AI score0.01741EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/08/15 5:54 p.m.•46 views

CVE-2018-14672

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5.5AI score0.01741EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/15 12:00 a.m.•11 views

CVE-2018-14672: Improper Limitation of a Pathname to a Restricted Directory

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...

5.3CVSS5.9AI score0.01741EPSS
SaveExploits0References2
Rows per page
Query Builder