h2o kayıtları
h2o üreticisine ait 35 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %11,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation4
- CWE-502 Deserialization of Untrusted Data4
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-400 Uncontrolled Resource Consumption3
- CWE-73 External Control of File Name or Path2
- CWE-770 Allocation of Resources Without Limits or Throttling2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
35 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
48Planlayın | CVE-2023-6016İstismar yok | H2O Remote Code Execution via POJO Model Importh2o · h2o · CWE-94 | Kritik9,8 | — | %30,6 | 16 Kas 2023 |
39İzleyin | CVE-2024-10553İstismar yok | Jdbc Deserialization in h2oai/h2o-3h2o · h2o · CWE-502 | Kritik9,8 | — | %1,6 | 20 Mar 2025 |
39İzleyin | CVE-2026-3960İstismar yok | Remote Code Execution in h2oai/h2o-3h2o · h2o · CWE-94 | Kritik9,8 | — | %1,0 | 23 Nis 2026 |
39İzleyin | CVE-2025-6544İstismar yok | Deserialization Vulnerability in h2oai/h2o-3h2o · h2o · CWE-502 | Kritik9,8 | — | %0,9 | 21 Eyl 2025 |
36İzleyin | CVE-2024-45758İstismar yok | H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command exh2o · h2o · CWE-502 | Kritik9,1 | — | %0,9 | 6 Eyl 2024 |
32İzleyin | CVE-2023-6569İstismar yok | External Control of File Name or Path in h2oai/h2o-3h2o · h2o · CWE-73 | Yüksek8,2 | — | %0,7 | 14 Ara 2023 |
32İzleyin | CVE-2024-8616İstismar yok | Arbitrary File Overwrite in h2oai/h2o-3h2o · h2o · CWE-73 | Yüksek8,2 | — | %0,5 | 20 Mar 2025 |
31İzleyin | CVE-2023-6038Kavram kanıtı | Local File Inclusion in h2oai/h2o-3h2o · h2o · CWE-862 | Yüksek7,5 | — | %4,3 | 16 Kas 2023 |
30İzleyin | CVE-2024-5979İstismar yok | Denial of Service via Invalid Argument in h2oai/h2o-3h2o · h2o · CWE-94 | Yüksek7,5 | — | %0,8 | 27 Haz 2024 |
30İzleyin | CVE-2024-7768İstismar yok | Denial of Service in h2oai/h2o-3h2o · h2o · CWE-770 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2024-7765İstismar yok | Denial of Service in h2oai/h2o-3h2o · h2o · CWE-409 | Yüksek7,5 | — | %0,8 | 20 Mar 2025 |
30İzleyin | CVE-2024-10572İstismar yok | Denial of Service and Arbitrary File Write in h2oai/h2o-3h2o · h2o · CWE-94 | Yüksek7,5 | — | %0,7 | 20 Mar 2025 |
30İzleyin | CVE-2024-10550İstismar yok | Denial of Service by ReDOS in h2oai/h2o-3h2o · h2o · CWE-1333 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2024-10549İstismar yok | Denial of Service by ReDOS in h2oai/h2o-3h2o · h2o · CWE-1333 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2026-54340İstismar yok | h2o has HTTP/2 state amplificationh2o · h2o · CWE-400 | Yüksek7,5 | — | %0,5 | 16 Tem 2026 |
30İzleyin | CVE-2026-44436İstismar yok | Quicly is vulnerable to connection state corruptionh2o · quicly · CWE-120 | Yüksek7,5 | — | %0,5 | 16 Tem 2026 |
30İzleyin | CVE-2026-44435İstismar yok | Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KBh2o · quicly · CWE-400 | Yüksek7,5 | — | %0,5 | 16 Tem 2026 |
30İzleyin | CVE-2026-44433İstismar yok | Quicly is vulnerable to memory exhaustionh2o · quicly · CWE-400 | Yüksek7,5 | — | %0,5 | 16 Tem 2026 |
30İzleyin | CVE-2026-44453İstismar yok | h2o is vulnerable to musl libc stack overflowh2o · h2o · CWE-770 | Yüksek7,5 | — | %0,5 | 16 Tem 2026 |
30İzleyin | CVE-2024-8062İstismar yok | Denial of Service in h2oai/h2o-3h2o · h2o · CWE-1088 | Yüksek7,5 | — | %0,5 | 20 Mar 2025 |
30İzleyin | CVE-2025-61684İstismar yok | Quicly has assertion failuresh2o · quicly · CWE-20 | Yüksek7,5 | — | %0,4 | 19 Oca 2026 |
28İzleyin | CVE-2023-6017İstismar yok | H2O S3 Bucket Takeoverh2o · h2o · CWE-840 | Yüksek7,1 | — | %0,9 | 16 Kas 2023 |
28İzleyin | CVE-2024-6854İstismar yok | Arbitrary File Overwrite in h2oai/h2o-3h2o · h2o · CWE-36 | Yüksek7,1 | — | %0,8 | 20 Mar 2025 |
28İzleyin | CVE-2024-1456İstismar yok | S3 Bucket Takeover in h2oai/h2o-3h2o · h2o · CWE-840 | Yüksek7,1 | — | %0,2 | 15 Nis 2024 |
27İzleyin | CVE-2024-8862İstismar yok | h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserializationh2o · h2o · CWE-502 | Orta6,9 | — | %1,3 | 14 Eyl 2024 |
- CVE-2023-601648Planlayın
H2O Remote Code Execution via POJO Model Import
KritikCVSS 9,8İstismar yokEPSS %31h2o · h2o16 Kas 2023
- CVE-2024-1055339İzleyin
Jdbc Deserialization in h2oai/h2o-3
KritikCVSS 9,8İstismar yokEPSS %2h2o · h2o20 Mar 2025
- CVE-2026-396039İzleyin
Remote Code Execution in h2oai/h2o-3
KritikCVSS 9,8İstismar yokEPSS %1h2o · h2o23 Nis 2026
- CVE-2025-654439İzleyin
Deserialization Vulnerability in h2oai/h2o-3
KritikCVSS 9,8İstismar yokEPSS %1h2o · h2o21 Eyl 2025
- CVE-2024-4575836İzleyin
H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command ex
KritikCVSS 9,1İstismar yokEPSS %1h2o · h2o6 Eyl 2024
- CVE-2023-656932İzleyin
External Control of File Name or Path in h2oai/h2o-3
YüksekCVSS 8,2İstismar yokEPSS %1h2o · h2o14 Ara 2023
- CVE-2024-861632İzleyin
Arbitrary File Overwrite in h2oai/h2o-3
YüksekCVSS 8,2İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2023-603831İzleyin
Local File Inclusion in h2oai/h2o-3
YüksekCVSS 7,5Kavram kanıtıEPSS %4h2o · h2o16 Kas 2023
- CVE-2024-597930İzleyin
Denial of Service via Invalid Argument in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %1h2o · h2o27 Haz 2024
- CVE-2024-776830İzleyin
Denial of Service in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2024-776530İzleyin
Denial of Service in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2024-1057230İzleyin
Denial of Service and Arbitrary File Write in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2024-1055030İzleyin
Denial of Service by ReDOS in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2024-1054930İzleyin
Denial of Service by ReDOS in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2026-5434030İzleyin
h2o has HTTP/2 state amplification
YüksekCVSS 7,5İstismar yokEPSS %0h2o · h2o16 Tem 2026
- CVE-2026-4443630İzleyin
Quicly is vulnerable to connection state corruption
YüksekCVSS 7,5İstismar yokEPSS %0h2o · quicly16 Tem 2026
- CVE-2026-4443530İzleyin
Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB
YüksekCVSS 7,5İstismar yokEPSS %0h2o · quicly16 Tem 2026
- CVE-2026-4443330İzleyin
Quicly is vulnerable to memory exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0h2o · quicly16 Tem 2026
- CVE-2026-4445330İzleyin
h2o is vulnerable to musl libc stack overflow
YüksekCVSS 7,5İstismar yokEPSS %0h2o · h2o16 Tem 2026
- CVE-2024-806230İzleyin
Denial of Service in h2oai/h2o-3
YüksekCVSS 7,5İstismar yokEPSS %0h2o · h2o20 Mar 2025
- CVE-2025-6168430İzleyin
Quicly has assertion failures
YüksekCVSS 7,5İstismar yokEPSS %0h2o · quicly19 Oca 2026
- CVE-2023-601728İzleyin
H2O S3 Bucket Takeover
YüksekCVSS 7,1İstismar yokEPSS %1h2o · h2o16 Kas 2023
- CVE-2024-685428İzleyin
Arbitrary File Overwrite in h2oai/h2o-3
YüksekCVSS 7,1İstismar yokEPSS %1h2o · h2o20 Mar 2025
- CVE-2024-145628İzleyin
S3 Bucket Takeover in h2oai/h2o-3
YüksekCVSS 7,1İstismar yokEPSS %0h2o · h2o15 Nis 2024
- CVE-2024-886227İzleyin
h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization
OrtaCVSS 6,9İstismar yokEPSS %1h2o · h2o14 Eyl 2024