39 matches found
EUVD-2018-2802
Malware in sbrugna...
EUVD-2021-13990
Malware in sbrugna...
EUVD-2020-29665
Malware in sbrugna...
EUVD-2023-56414
Malicious code in bioql PyPI...
EUVD-2023-28109
Malicious code in bioql PyPI...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
Authentication flaw
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
Dataiku DSS Security Vulnerability
Dataiku DSS is a machine collaboration platform from Dataiku, Inc. A security vulnerability exists in Dataiku DSS versions prior to 11.4.5 and 12.4.1 that stems from having incorrect access control and could lead to a complete bypass of authentication...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2023-51717
CVE-2023-51717 affects Dataiku DSS prior to 11.4.5 and prior to 12.4.1 with an Incorrect Access Control that could lead to a full authentication bypass. Affected software is Dataiku DSS (versions before 11.4.5 and before 12.4.1). Root cause is improper access control allowing bypass of authentica...
PT-2024-14257 · Dataiku · Dataiku Dss
Name of the Vulnerable Software and Affected Versions: Dataiku DSS versions prior to 11.4.5 Dataiku DSS versions prior to 12.4.1 Description: The issue is related to Incorrect Access Control, which could lead to a full authentication bypass. Recommendations: For versions prior to 11.4.5, update t...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
Cross site request forgery (csrf)
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
DataIku DSS 代码问题漏洞
Dataiku DSS is a machine collaboration platform from Dataiku, Inc. A security vulnerability exists in DataIku DSS versions prior to 11.3.2, which can be exploited by an attacker to download Dataiku files that have been uploaded to myfiles by specifying the target username in the download request...