CVE-2022-44645 Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures new datasource with a MySQL data source and malicious parameters. Therefore, the parameter...

CVE-2022-44645 Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures new datasource with a MySQL data source and malicious parameters. Therefore, the parameter...

CVE-2022-44645

CVE-2022-44645 affects Apache Linkis

CVE-2022-44645 Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures new datasource with a MySQL data source and malicious parameters. Therefore, the parameter...

PT-2023-1346 · Apache +1 · Apache Linkis +1

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions prior to 1.3.1 Description: The issue is related to insufficient protection of service data when handling the allowLoadLocalInfile parameter with a value of true in the MySQL Connector/J component of Apache Linkis. This...

Citrix Secure Private Access (SPA ) Connector Appliance not wokring with proxy configuration

Connector Appliance does not work with proxy configuration As soon as proxy config is added, connectivity check fails for all the URLs...

PT-2023-1550 · Ibm · Ibm App Connect Enterprise

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 11.0.0.17 through 11.0.0.19 IBM App Connect Enterprise versions 12.0.4.0 and 12.0.5.0 Description: The issue is related to a lack of protection for service data in the Discovery component of the App Connect...

Security Bulletin: IBM App Connect Enterprise Discovery Connector nodes are vulnerable to a loss of confidentiality due to CVE-2022-42439

Summary IBM App Connect Enterprise contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system's credentials to be exposed to a privileged attacker. The fix provided resolves the vulnerability. Vulnerability Details CVEID:CVE-2022-42439 DESCRIPTION: I...

RHEL 6 / 7 : rh-mariadb102-mariadb and rh-mariadb102-galera (RHSA-2020:4174)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4174 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...

Oracle MySQL Python Connector (Jan 2023 CPU)

The versions of Python Connector installed on the remote host are affected by a vulnerability as referenced in the January 2023 CPU advisory. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multipl...

Oracle MySQL NET Connector (Jan 2023 CPU)

The versions of MySQL NET Connector installed on the remote host are affected by a vulnerability as referenced in the January 2023 CPU advisory. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2014-125083

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named...

Sql injection

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named...

CVE-2014-125083 Anant Labs google-enterprise-connector-dctm sql injection

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named...

CVE-2014-125083 Anant Labs google-enterprise-connector-dctm sql injection

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named...

CVE-2014-125083

The CVE-2014-125083 entry applies to Anant Labs google-enterprise-connector-dctm up to version 3.2.3. The root cause is SQL injection via manipulation of the username and domain arguments in the affected functionality. The issue is rated critical (CVSS v3.1) with potential high impact to confiden...

google-enterprise-connector-dctm SQL注入漏洞

google-enterprise-connector-dctm is a Google Search Appliance connector for individual developers. A SQL injection vulnerability exists in google-enterprise-connector-dctm 3.2.3 and below, which can be exploited by an attacker to manipulate the parameter username/domain resulting in a sql injecti...

PT-2023-10153 · Anant · Google-Enterprise-Connector-Dctm

Name of the Vulnerable Software and Affected Versions: Anant Labs google-enterprise-connector-dctm versions up to 3.2.3 Description: A critical vulnerability has been found in the software, affecting an unknown functionality. The manipulation of the username and domain arguments leads to SQL...

GSD-2023-1000963 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()

drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

CVE-2022-41703 Apache Superset: SQL injection vulnerability in adhoc clauses

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...