CVE-2026-45320

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

Red Database ConditionalStream Class DoS

The vulnerability of the ConditionalStream::ConditionalStream class in the ConditionalStream.cpp module of the “Red Database” database management system is related to the use of the BETWEEN operator in the WHERE clause during query preparation. Exploiting this vulnerability can allow an attacker ...

PT-2024-41466

Уязвимость класса ConditionalStream::ConditionalStream модуль ConditionalStream.cpp системы управления базами данных «Ред База Данных» связана с использованием оператора BETWEEN в условии WHERE, которое содержит ошибку, при подготовке запроса к выполнению. Эксплуатация уязвимости может позволить...