CVE-2024-32888 vulnerabilities

Vulnerabilities for packages: trino...

CVE-2024-32888

creationtimestamp| type| source ---|---|--- 2024-05-17 14:56:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/604...

CVE-2024-32888 Amazon JDBC Driver for Redshift SQL Injection via line comment generation

The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. Prior to version 2.1.0.28, SQL injection is possible when using the non-default...

com.netflix.metacat:metacat-connector-redshift (>=1.3.0, <=1.3.1), com.trib3:db (>=1.19.1891, <=3.1.5004) +63 more potentially affected by CVE-2024-32888 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.1.0.26)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =6.0.0-spark3.3, =0.2.8, =359, =1.0.0, =1.0.0, =2.3.4, =0.1.5, =0.1.1, =2.59.0, =3.0.0 and more Source cves: CVE-2024-32888 Source advisory: MEND:CVE-2024-32888...

cc.protea.foundation:foundation (0.4.1), cc.protea.platform:platform (0.4.1) +48 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1208)

org.postgresql:postgresql MAVEN version 9.4.1208 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - cc.protea.foundation:foundation 0.4.1 - cc.protea.platform:platform 0.4.1 - com.gitblit.iciql:iciql =2.0.0...

com.github.imliar:slicker-postgres_2.11 (0.1), com.github.jacoby6000:scoobie-contrib-doobie40-postgres_2.11 (>=0.3.0, <=0.3.1) +106 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1211)

org.postgresql:postgresql MAVEN version 9.4.1211 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.github.imliar:slicker-postgres2.11 0.1 - com.github.jacoby6000:scoobie-contrib-doobie40-postgres2.11...

com.eclecticlogic:pedal (>=1.4.1, <=1.4.18), com.eclecticlogic:pedal-dialect (>=1.0.0, <=1.5.1) +48 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.3-1102-jdbc41)

org.postgresql:postgresql MAVEN version 9.3-1102-jdbc41 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.eclecticlogic:pedal =1.4.1, =1.0.0, =1.5.0, =0.76, =0.148, =0.186, =0.0.1, =1.0.6, =0.0.5, =0.1...

com.nitorcreations:nflow-perf-test (3.0.0), com.nitorcreations:nflow-tests (3.0.0) +7 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1207.jre7)

org.postgresql:postgresql MAVEN version 9.4.1207.jre7 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.nitorcreations:nflow-perf-test 3.0.0 - com.nitorcreations:nflow-tests 3.0.0 -...

io.github.factoryfx:postgresqlstorage (>=0.4, <=1.0.0) potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1210.jre7)

org.postgresql:postgresql MAVEN version 9.4.1210.jre7 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - io.github.factoryfx:postgresqlstorage =0.4, =1.0.0 Source cves: CVE-2024-1597, CVE-2024-32888 Source...

com.arpnetworking.metrics:metrics-portal (>=0.9.0, <=0.10.68), com.arpnetworking.metrics:metrics-portal_2.11 (>=0.5.3, <=0.9.2) +23 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4-1206-jdbc42)

org.postgresql:postgresql MAVEN version 9.4-1206-jdbc42 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.arpnetworking.metrics:metrics-portal =0.9.0, =0.5.3, =0.6.0, =2015.12.01, =2015.12.01, =0.1.0,...

com.bazarnazar:pgjson (>=1.1, <=1.3), com.github.bazar-nazar:pgjson (1.0) +9 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.2-1002-jdbc4)

org.postgresql:postgresql MAVEN version 9.2-1002-jdbc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.bazarnazar:pgjson =1.1, =1.0.3.release, =1.0.4.release Source cves: CVE-2024-1597, CVE-2024-3288...

si.urbas:pless-jpa-sample_2.10 (>=0.0.9, <=0.0.12), si.urbas:pless-jpa-sample_2.11 (>=0.0.13, <=0.0.16) +6 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.2-1004-jdbc4)

org.postgresql:postgresql MAVEN version 9.2-1004-jdbc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - si.urbas:pless-jpa-sample2.10 =0.0.9, =0.0.13, =0.0.9, =0.0.13, =0.0.9, =0.0.13, =0.0.4, =0.0.8 Sour...

cc.protea.foundation:foundation (>=0.2, <=0.3.1), cc.protea.platform:platform (>=0.1, <=0.3.1) +175 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4-1201-jdbc41)

org.postgresql:postgresql MAVEN version 9.4-1201-jdbc41 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - cc.protea.foundation:foundation =0.2, =0.1, =0.10.1, =0.10.1, =0.0.6, =1.1.0.release, =1.1.0.releas...

com.github.piltt:silky-persistence_2.10 (>=1.0.63, <=1.0.67), com.github.piltt:silky-persistence_2.11 (>=1.0.63, <=1.0.67) +24 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1209)

org.postgresql:postgresql MAVEN version 9.4.1209 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.63, =1.0.63, =2016.7.28, =2016.7.28, =2016.8.17 and more Sourc...

com.nimworks:nw.orm (3.0.1-alpha), io.github.oshai:jooq-postgis-spatial (1.0) +6 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4-1201-jdbc4)

org.postgresql:postgresql MAVEN version 9.4-1201-jdbc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.nimworks:nw.orm 3.0.1-alpha - io.github.oshai:jooq-postgis-spatial 1.0 -...

app.cash.sqldelight:postgresql-dialect (2.0.0-alpha03), bi.deep:flink-connector-jdbc-source-1.15 (>=0.1, <=0.1.1) +571 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (>=42.4.0, <=42.4.3)

org.postgresql:postgresql MAVEN version =42.4.0, =0.1, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =3.24.1, =3.20.0, =3.20.0, =3.24.6 and more Source cves: CVE-2024-1597, CVE-2024-32888 Source advisory: OSV:GHSA-24RP-Q3W6-VC56...

com.dslplatform:dsl-clc (>=1.8.3, <=1.9.0), com.dslplatform:dsl-json-processor (>=1.4.1, <=1.4.6) +1 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4.1212.jre6)

org.postgresql:postgresql MAVEN version 9.4.1212.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.8.3, =1.4.1, =1.1.0, =1.2.0 Source cves: CVE-2024-1597, CVE-2024-32888...

com.ea.orbit:orbit-actors-postgresql (>=0.5.0, <=0.5.2), com.netradius:hibernate-support (>=1.0.0, <=5.4.0.0) +6 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (9.4-1204-jdbc42)

org.postgresql:postgresql MAVEN version 9.4-1204-jdbc42 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.ea.orbit:orbit-actors-postgresql =0.5.0, =1.0.0, =1.0.4.1, =14.04.01, =14.04.03 Source cves:...

ai.knowly:langtorch (>=0.0.16, <=0.0.17), app.cash.sqldelight:postgresql-dialect (>=2.0.0-alpha04, <=2.0.0-alpha05) +862 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (>=42.5.0, <=42.5.4)

org.postgresql:postgresql MAVEN version =42.5.0, =0.0.16, =2.0.0-alpha04, =2.0.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.8.0, =6.4.0, =6.2.0, =6.2.5 and more Source cves: CVE-2024-1597, CVE-2024-32888 Source advisory: OSV:GHSA-24RP-Q3W6-VC56...

app.cash.sqldelight:postgresql-dialect (>=2.0.0-rc01, <=2.0.0), app.softwork:postgres-native-sqldelight-dialect (>=0.0.8, <=0.0.11) +1007 more potentially affected by CVE-2024-1597 +1 more via org.postgresql:postgresql (42.6.0)

org.postgresql:postgresql MAVEN version 42.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - app.cash.sqldelight:postgresql-dialect =2.0.0-rc01, =0.0.8, =0.4.0, =1.2.0, =1.3.1 -...