Lucene search
+L

6 matches found

Prion
Prion
•added 2024/02/22 8:15 p.m.•21 views

Deserialization of untrusted data

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

5.1CVSS7AI score0.00684EPSS
SaveExploits0References3
CVE
CVE
•added 2024/02/22 7:31 p.m.•104 views

CVE-2024-1748

CVE-2024-1748 affects van_der_Schaar LAB AutoPrognosis 0.1.21, specifically the Release Note Handler's function load_model_from_file , where input deserialization leads to a vulnerability. Descriptions across sources indicate remote initiation with high impact on confidentiality, integrity, and a...

7.5CVSS5.1AI score0.00684EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/02/22 7:31 p.m.•32 views

CVE-2024-1748 van_der_Schaar LAB AutoPrognosis Release Note load_model_from_file deserialization

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

5.1CVSS5.4AI score0.00684EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/22 12:00 a.m.•16 views

PT-2024-18273 · Van Der Schaar · Van Der Schaar Lab Autoprognosis

Name of the Vulnerable Software and Affected Versions: van der Schaar LAB AutoPrognosis version 0.1.21 Description: A critical vulnerability was found in the function load model from file of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated...

7.5CVSS6.9AI score0.00684EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/22 12:00 a.m.•4 views

CVE-2024-1748: Deserialization of Untrusted Data

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

7.5CVSS4.9AI score0.00684EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/22 12:00 a.m.•16 views

van_der_Schaar LAB AutoPrognosis Code Issue Vulnerability

AutoPrognosis is a vanderSchaar LAB open source predictive modeling pipeline for clinical prognosis. A code issue vulnerability exists in vanderSchaar LAB AutoPrognosis version 0.1.21, which stems from a security vulnerability in the loadmodelfromfile function in the component Release Note Handle...

7.5CVSS6.9AI score0.00684EPSS
SaveExploits0References4
Rows per page
Query Builder