Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-37279

Malicious code in bioql PyPI...

8.5CVSS6.6AI score0.02371EPSS
Exploits0References1
OSV
OSV
added 2024/07/09 2:10 p.m.2 views

CVE-2024-38363 Remote Code Execution (RCE) via Server Side Template Injection (SSTI) in Airbyte

Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder is used to create and test new...

8.5CVSS7.8AI score0.02371EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/07/09 2:10 p.m.14 views

CVE-2024-38363 Remote Code Execution (RCE) via Server Side Template Injection (SSTI) in Airbyte

Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder is used to create and test new...

8.5CVSS7.6AI score0.02371EPSS
Exploits0References1
CVE
CVE
added 2024/07/09 2:10 p.m.47 views

CVE-2024-38363

Airbyte’s CVE-2024-38363 affects the Airbyte connection builder docker image, where server-side template injection (SSTI) enables authenticated remote code execution as the web server user. The connection builder is used to create/test new connectors, and exploitation could lead to exposure of se...

8.5CVSS8.6AI score0.02371EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.3 views

Airbyte Security Breach

Airbyte is an ETL/ELT data pipeline data integration platform from Airbyte Open Source. A security vulnerability exists in Airbyte versions prior to v0.62.2 that stems from the presence of a remote code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary cod...

8.5CVSS8.4AI score0.02371EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.2 views

PT-2024-27960 · Airbyte · Airbyte

Name of the Vulnerable Software and Affected Versions: Airbyte versions prior to 0.62.2 Description: The Airbyte connection builder docker image is vulnerable to remote code execution RCE via server-side template injection SSTI, allowing an authenticated remote attacker to execute arbitrary code ...

8.5CVSS8.7AI score0.02371EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2021/07/20 5:33 p.m.2 views

@acaciomartins/react-native-simpletable (>=0.0.1 <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4 <=1.0.7) +1206 more potentially affected by CVE-2020-1920 via react-native (>=0.59.0 <=0.62.2)

react-native NPM version =0.59.0, =0.0.1, =1.0.4, =2.3.3, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.3.0, =0.1.0, =0.1.0, =0.1.1, =0.1.3 and more Source cves: CVE-2020-1920 Source advisory: OSV:GHSA-7F53-FMMV-MFJV...

7.5CVSS7.1AI score0.00132EPSS
Exploits0
Rows per page
Query Builder