Apache Zeppelin Code Injection Vulnerability

Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin suffers from a code injection vulnerability that can be exploited by an attacker to use the Shell interpret...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2024-2952 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2024-2952 Source advisory: OSV:GHSA-46CM-PFWV-CGF8...

fastrepl (>=0.0.21, <=0.0.25), funcflow (0.0.3) +2 more potentially affected by CVE-2024-2952 via litellm (0.8.6)

litellm PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.21, =0.0.5, =0.0.9 Source cves: CVE-2024-2952 Source advisory: OSV:GHSA-46CM-PFWV-CGF8...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2024-2952 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2024-2952 Source advisory: OSV:GHSA-46CM-PFWV-CGF8...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2024-2952 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2024-2952 Source advisory: OSV:GHSA-46CM-PFWV-CGF8...

PT-2024-24249

Name of the Vulnerable Software and Affected Versions Apache Zeppelin versions 0.10.1 through 0.11.0 Description A security vulnerability has been identified in Apache Zeppelin, allowing attackers to inject malicious code through the Shell interpreter. This issue affects the Shell interpreter,...

io.warp10:warp10-plugin-zeppelin (2.0.0), org.apache.iotdb:zeppelin-iotdb (>=0.12.0, <=1.3.1) +84 more potentially affected by CVE-2024-31868 via org.apache.zeppelin:zeppelin-interpreter (>=0.8.2, <=0.11.0)

org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.8.2, =0.12.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.10.0, =0.10.1 - org.apache.zeppelin:flink1.14-shims 0.10.1 - org.apache.zeppelin:flink1.15-shims 0.11.0 - org.apache.zeppelin:flink1.16-shims 0.11.0 and more Source cves:...

io.warp10:warp10-plugin-zeppelin (2.0.0), org.apache.iotdb:zeppelin-iotdb (>=0.12.0, <=1.3.1) +84 more potentially affected by CVE-2024-31868 via org.apache.zeppelin:zeppelin-interpreter (>=0.8.2, <=0.11.0)

org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.8.2, =0.12.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.10.0, =0.10.1 - org.apache.zeppelin:flink1.14-shims 0.10.1 - org.apache.zeppelin:flink1.15-shims 0.11.0 - org.apache.zeppelin:flink1.16-shims 0.11.0 and more Source cves:...

io.warp10:warp10-plugin-zeppelin (2.0.0), org.apache.iotdb:zeppelin-iotdb (>=0.12.0, <=1.3.1) +84 more potentially affected by CVE-2024-31866 via org.apache.zeppelin:zeppelin-interpreter (>=0.8.2, <=0.11.0)

org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.8.2, =0.12.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.10.0, =0.10.1 - org.apache.zeppelin:flink1.14-shims 0.10.1 - org.apache.zeppelin:flink1.15-shims 0.11.0 - org.apache.zeppelin:flink1.16-shims 0.11.0 and more Source cves:...

io.warp10:warp10-plugin-zeppelin (2.0.0), org.apache.iotdb:zeppelin-iotdb (>=0.12.0, <=1.3.1) +84 more potentially affected by CVE-2024-31866 via org.apache.zeppelin:zeppelin-interpreter (>=0.8.2, <=0.11.0)

org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.8.2, =0.12.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.10.0, =0.10.1 - org.apache.zeppelin:flink1.14-shims 0.10.1 - org.apache.zeppelin:flink1.15-shims 0.11.0 - org.apache.zeppelin:flink1.16-shims 0.11.0 and more Source cves:...

io.warp10:warp10-plugin-zeppelin (2.0.0), org.apache.iotdb:zeppelin-iotdb (>=0.12.0, <=1.3.1) +84 more potentially affected by CVE-2024-31868 via org.apache.zeppelin:zeppelin-interpreter (>=0.8.2, <=0.11.0)

org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.8.2, =0.12.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.10.0, =0.10.1 - org.apache.zeppelin:flink1.14-shims 0.10.1 - org.apache.zeppelin:flink1.15-shims 0.11.0 - org.apache.zeppelin:flink1.16-shims 0.11.0 and more Source cves:...

io.warp10:warp10-plugin-zeppelin (2.0.0), org.apache.iotdb:zeppelin-iotdb (>=0.12.0, <=1.3.1) +84 more potentially affected by CVE-2024-31866 via org.apache.zeppelin:zeppelin-interpreter (>=0.8.2, <=0.11.0)

org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.8.2, =0.12.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.10.0, =0.10.1 - org.apache.zeppelin:flink1.14-shims 0.10.1 - org.apache.zeppelin:flink1.15-shims 0.11.0 - org.apache.zeppelin:flink1.16-shims 0.11.0 and more Source cves:...

ROS-20240409-01

A vulnerability in the urllib.parse component of the Python programming language interpreter is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely, bypass URL blocking starting with empty characters A vulnerability in the Python...

SUSE CVE-2023-52621

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcureadlocktraceheld before calling bpf map helpers These three bpfmaplookup,update,deleteelem helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program,...

AZL-58761 CVE-2023-52621 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcureadlocktraceheld before calling bpf map helpers These three bpfmaplookup,update,deleteelem helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program,...

DEBIAN-CVE-2023-52621

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcureadlocktraceheld before calling bpf map helpers These three bpfmaplookup,update,deleteelem helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program,...

CVE-2023-52621

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcureadlocktraceheld before calling bpf map helpers These three bpfmaplookup,update,deleteelem helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program,...

CVE-2023-52621

CVE-2023-52621: In the Linux kernel, a fix was added to bpf map helpers (bpf_map_lookup_elem, bpf_map_update_elem, bpf_map_delete_elem) to check rcu_read_lock_trace_held() before use when running sleepable BPF programs. The vulnerability arises when sleepable BPF programs manipulate BPF maps unde...

Nokogiri Disclosure DoS

The vulnerability of the Nokogiri library in the Ruby interpreter is related to improper handling of unexpected data types. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

CVE-2024-28123

Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an Out-of-bounds Buffer Write will arise if the host calls or resumes a Wasm function with more parameters than the default limit 128, as it will surpass the...