34 matches found
CVE-2018-10732
CVE-2018-10732 النشر في Exploit-DB: لا إفصاح! تصحيح واعتمادات البائع Dataiku: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity المؤلف Alex Hernandez المعروف أيضًا باسم @alt3kx...
EUVD-2020-29665
Malware in sbrugna...
EUVD-2018-2802
Malware in sbrugna...
EUVD-2021-13990
Malware in sbrugna...
EUVD-2023-56414
Malicious code in bioql PyPI...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
Authentication flaw
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2023-51717
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
CVE-2023-51717: Improper Authentication
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...
Dataiku DSS Security Vulnerability
Dataiku DSS is a machine collaboration platform from Dataiku, Inc. A security vulnerability exists in Dataiku DSS versions prior to 11.4.5 and 12.4.1 that stems from having incorrect access control and could lead to a complete bypass of authentication...
PT-2023-19376
Name of the Vulnerable Software and Affected Versions Dataiku DSS version 11.2.1 Description The issue allows an attacker to download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request. Recommendations For Dataiku DSS version...
CVE-2023-24045
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2023-24045: Unrestricted Upload of File with Dangerous Type
In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
Improper access control
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
CVE-2021-27225: Incorrect Authorization
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...