Filter
Versions
H2O.ai H2OH2O assertion failure when HTTP/3 requests are cancelled
7.5
First published (updated )
H2O.ai H2OH2O alllows bypassing address-based access control with 0-RTT
7.5
First published (updated )
H2O.ai H2OH2O ignores headers configuration directives
4.3
First published (updated )
pip/dtaleh2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization
9.8
EPSS
0.29%
First published (updated )
pip/h2oExposure of Sensitive Information via Arbitrary System Path Lookup in h2oai/h2o-3
5.3
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/h2oExternal Control of File Name or Path in h2oai/h2o-3
9.3
EPSS
0.05%
First published (updated )
H2O.ai H2Oh2o vulnerable to TLS session resumption misdirection
6.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/ai.h2o:h2o-coreLocal File Inclusion in h2oai/h2o-3
9.3
EPSS
5.00%
First published (updated )
H2O.ai H2OH2O Remote Code Execution via POJO Model Import
10
EPSS
0.39%
First published (updated )
CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations
First published (updated )
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
H2O.ai H2OH2O vulnerable to read from uninitialized pointer in the reverse proxy handler
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
H2O.ai H2OH2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
H2O.ai H2OH2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.