59 matches found
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.apiverse:apipulse (>='1.0.3', <=1.0.20) +25974 more potentially affected by CVE-2022-42004 via com.fasterxml.jackson.core:jackson-databind (>=2.13.0, <=2.13.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.13.0, =4.4.0.2, ='1.0.3', =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.1, =1.1.1, =0.19.0, =0.32.0 and more Source cves: CVE-2022-42004 Source advisory: OSV:GHSA-RGV9-Q543-RQG4...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +7979 more potentially affected by CVE-2022-40152 via com.fasterxml.woodstox:woodstox-core (>=5.0.0, <=5.3.0)
com.fasterxml.woodstox:woodstox-core MAVEN version =5.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +607 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=2.4.1, <=2.4.2)
net.minidev:json-smart MAVEN version =2.4.1, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.2.1, =0.3.0, =3.16.0 and more Source cves: CVE-2021-31684 Source advisory: GHSA-FG2V-W576-W4V3...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +27485 more potentially affected by CVE-2021-22569 via com.google.protobuf:protobuf-java (>=2.0.3, <=3.16.0)
com.google.protobuf:protobuf-java MAVEN version =2.0.3, =1.4.6, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2.10 and more Source cves: CVE-2021-22569 Source advisory: MEND:CVE-2021-22569...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +9384 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=2.0, <=2.3)
net.minidev:json-smart MAVEN version =2.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.4...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.grakn:grakn-dist (>=0.10.0, <=0.15.0) +1892 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (3.10.5.final)
io.netty:netty MAVEN version 3.10.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =0.10.0, =0.10.0, =0.10.0, =0.15.0 - ai.grakn:migration-base 0.10.0 -...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
UBUNTU-CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
Path traversal
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672: Improper Limitation of a Pathname to a Restricted Directory
In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
PT-2019-9043 · Yandex · Clickhouse
Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 18.12.13 Description: The issue allows path traversal and reading of arbitrary files through error messages in functions for loading CatBoost models. Recommendations: For versions prior to 18.12.13, update to...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +26914 more potentially affected by CVE-2018-12022 via com.fasterxml.jackson.core:jackson-databind (>=2.0.0-rc1, <=2.7.9.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.0.0-rc1, =0.1, =0.3.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.0.115 and more Source cves:...
Fixed in ClickHouse Release 18.12.13, 2018-09-10
Functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
Fixed in ClickHouse Release 18.12.13, 2018-09-10
Functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages...
CVE-2018-14672
Functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages. Andrey Krasichkov of Yandex Information Security Team...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8) +23046 more potentially affected by CVE-2014-0114 via commons-beanutils:commons-beanutils (>=1.8.0, <=1.9.3)
commons-beanutils:commons-beanutils MAVEN version =1.8.0, =0.0.1, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.1.12, =0.0.2, =0.7.0,...