H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

References

packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html

seclists.org/fulldisclosure/2022/Jan/39

github.com/h2database/h2database/releases/tag/version-2.1.210

github.com/h2database/h2database/security/advisories

lists.debian.org/debian-lts-announce/2022/02/msg00017.html

security.netapp.com/advisory/ntap-20230818-0011/

twitter.com/d0nkey_man/status/1483824727936450564

www.debian.org/security/2022/dsa-5076

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpujul2022.html

openvas 4

nessus 12

osv 8

ubuntucve 2

debian 2

ubuntu 1

nvd 2

github 2

cve 2

debiancve 2

prion 2

zdt 1

hivepro 1

packetstorm 1

checkpoint_advisories 2

cnvd 1

githubexploit 1

redhatcve 2

veracode 2

thn 1

cvelist 1

threatpost 1

redhat 12

trellix 2

qualysblog 1

oracle 4

openvas

Debian: Security Advisory (DSA-5076-1)

2022-02-17 00:00:00

Ubuntu: Security Advisory (USN-6834-1)

2024-06-14 00:00:00

Debian: Security Advisory (DLA-2923-1)

2022-02-16 00:00:00

nessus

Debian DSA-5076-1 : h2database - security update

2022-02-16 00:00:00

Debian DLA-2923-1 : h2database - LTS security update

2022-02-15 00:00:00

Ubuntu 20.04 LTS : H2 vulnerabilities (USN-5365-1)

2022-04-05 00:00:00

osv

h2database - security update

2022-02-15 00:00:00

h2database - security update

2022-02-15 00:00:00

h2database vulnerabilities

2022-04-05 15:14:29

ubuntucve

CVE-2022-23221

2022-01-19 00:00:00

CVE-2021-42392

2022-01-10 00:00:00

debian

[SECURITY] [DLA 2923-1] h2database security update

2022-02-15 00:06:01

[SECURITY] [DSA 5076-1] h2database security update

2022-02-15 14:09:18

ubuntu

H2 vulnerabilities

2022-04-05 00:00:00

nvd

CVE-2022-23221

2022-01-19 17:15:09

CVE-2021-42392

2022-01-10 14:10:23

github

Arbitrary code execution in H2 Console

2022-01-21 23:07:39

RCE in H2 Console

2022-01-06 23:55:09

cve

CVE-2022-23221

2022-01-19 17:15:09

CVE-2021-42392

2022-01-10 14:10:23

debiancve

CVE-2022-23221

2022-01-19 17:15:09

CVE-2021-42392

2022-01-10 14:10:23

prion

Design/Logic Flaw

2022-01-19 17:15:00

Remote code execution

2022-01-10 14:10:00

zdt

H2 Database Console Remote Code Execution Exploit

2022-01-25 00:00:00

hivepro

2022-01-10 16:00:00

packetstorm

H2 Database Console Remote Code Execution

2022-01-25 00:00:00

checkpoint_advisories

H2 Database Remote Code Execution (CVE-2022-23221)

2022-11-03 00:00:00

H2 Database Console Remote Code Execution (CVE-2021-42392)

2022-01-23 00:00:00

cnvd

H2 database code issue vulnerability

2022-01-11 00:00:00

githubexploit

Exploit for Deserialization of Untrusted Data in H2Database H2

2022-01-09 16:23:16

redhatcve

CVE-2021-42392

2022-01-11 16:53:10

CVE-2022-23221

2022-01-24 19:58:40

veracode

Remote Code Execution (RCE)

2022-01-07 09:51:11

Remote Code Execution

2022-01-20 13:46:20

thn

Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console

2022-01-07 09:31:00

cvelist

CVE-2021-42392

2022-01-07 00:00:00

threatpost

2022-01-07 15:12:26

redhat

(RHSA-2022:4918) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7

2022-06-06 14:31:15

(RHSA-2022:4922) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.5 security update

2022-06-06 15:07:26

(RHSA-2022:4919) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8

2022-06-06 14:31:32

trellix

The Bug Report - January 2022 Edition

2022-02-02 00:00:00

The Bug Report - January 2022 Edition

2022-02-02 00:00:00

qualysblog

Oracle Patch Update, January 2024 Security Update Review

2024-01-17 15:29:33

oracle

Oracle Critical Patch Update Advisory - January 2024

2024-01-16 00:00:00

Oracle Critical Patch Update Advisory - April 2022

2022-04-19 00:00:00

Oracle Critical Patch Update Advisory - January 2023

2023-01-17 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

9.8 High

AI Score

Confidence

High

0.518 Medium

EPSS

Percentile

97.6%

JSON

Related for CVELIST:CVE-2022-23221