com.spotify:scio-elasticsearch6_2.12 (>=0.10.3, <=0.10.4), com.spotify:scio-elasticsearch6_2.13 (>=0.10.3, <=0.10.4) +6 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (6.8.16)

org.elasticsearch:elasticsearch MAVEN version 6.8.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.spotify:scio-elasticsearch62.12 =0.10.3, =0.10.3, =0.10.4 - io.gitee.johnpeng:mx-dal-elastic...

CVE-2024-42357 Shopware vulnerable to blind SQL-injection in DAL aggregations

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the...

CVE-2024-42357 Shopware vulnerable to blind SQL-injection in DAL aggregations

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the...

GHSA-P6W9-R443-R752 Shopware vulnerable to blind SQL-injection in DAL aggregations

Impact The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations” object. The ‘name’ field in this...

com.spotify:scio-elasticsearch6_2.12 (>=0.10.3, <=0.10.4), com.spotify:scio-elasticsearch6_2.13 (>=0.10.3, <=0.10.4) +6 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (6.8.16)

org.elasticsearch:elasticsearch MAVEN version 6.8.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.spotify:scio-elasticsearch62.12 =0.10.3, =0.10.3, =0.10.4 - io.gitee.johnpeng:mx-dal-elastic...

io.gitee.johnpeng:mx-dal-elastic (4.1.0), io.gitee.johnpeng:mx-service-utils (>=3.0.3, <=3.0.7) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (9.3)

com.graphql-java:graphql-java MAVEN version 9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic 4.1.0 - io.gitee.johnpeng:mx-service-utils =3.0.3, =3.0.7 Source cves:...

io.gitee.johnpeng:mx-dal-elastic (>=4.1.1, <=5.2.1), io.gitee.johnpeng:mx-dal-hibernate (>=5.0.0, <=5.2.4) +6 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (9.7)

com.graphql-java:graphql-java MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic =4.1.1, =5.0.0, =5.1.0, =2.0.1, =1.0.0, =3.0.7-patch1, =5.3.10 -...

com.spotify:scio-elasticsearch6_2.12 (>=0.10.3, <=0.10.4), com.spotify:scio-elasticsearch6_2.13 (>=0.10.3, <=0.10.4) +6 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (6.8.16)

org.elasticsearch:elasticsearch MAVEN version 6.8.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.spotify:scio-elasticsearch62.12 =0.10.3, =0.10.3, =0.10.4 - io.gitee.johnpeng:mx-dal-elastic...

CVE-2024-22406 Blind SQL-injection in DAL aggregations in Shopware

Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations...

com.spotify:scio-elasticsearch6_2.12 (>=0.10.3, <=0.10.4), com.spotify:scio-elasticsearch6_2.13 (>=0.10.3, <=0.10.4) +6 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (6.8.16)

org.elasticsearch:elasticsearch MAVEN version 6.8.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.spotify:scio-elasticsearch62.12 =0.10.3, =0.10.3, =0.10.4 - io.gitee.johnpeng:mx-dal-elastic...

CVE-2023-41636

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query...

CVE-2023-41636

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query...

Sql injection

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query...

CVE-2023-41636

CVE-2023-41636 describes a SQL injection in the parameters of GruppoSCAI RealGimm v1.1.37p38, specifically the Data Richiesta dal parameter. The vulnerability allows an attacker to access the database and execute arbitrary commands through a crafted SQL query. Affected software: GruppoSCAI RealGi...

CVE-2023-41636

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query...

CVE-2023-41636

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query...

CVE-2023-41636: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query...

K51470205: Intel DAL vulnerability CVE-2019-0170

Security Advisory Description Buffer overflow in subsystem in IntelR DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2019-0170 Impact Traffix SDC An attacker with local access to the system can exploit this vulnerability...

K43877335: Intel software vulnerabilities CVE-2020-8751, CVE-2020-8755, CVE-2020-8761, CVE-2020-12303

Security Advisory Description CVE-2020-8751 Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, IntelR TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access. CVE-2020-8755 Race condition...

CVE-2022-25905

Uncontrolled search path element in the IntelR oneAPI Data Analytics Library oneDAL before version 2021.5 for IntelR oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...