CVE-2023-31847

Affects davinci 0.3.0-rc. After login, a user can connect to a malicious MySQL server by abusing data-source control to read arbitrary files on the client side. Impact: confidentiality high; exploitation not described in detail. No patch information is provided in the sources; a workflow-based wo...

CVE-2023-31847

In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...

Davinci 代码问题漏洞

Davinci is an edp open source DVsaaS Data Visualization Service platform. A security vulnerability exists in Davinci version 0.3.0-rc, which stems from vulnerability to server request forgery SSRF attacks...

CVE-2023-31848

CVE-2023-31848 affects davinci 0.3.0-rc and is caused by a server-side request forgery (SSRF) vulnerability. The available sources consistently identify the affected component as the davinci application, version 0.3.0-rc, with SSRF as the underlying issue. The CVSS 3.1 base metrics in the initial...

PT-2023-23488 · Davinci · Davinci

Name of the Vulnerable Software and Affected Versions: davinci version 0.3.0-rc Description: The issue is related to Server-side request forgery SSRF. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-31848

davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...

CVE-2023-31848

davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...

CVE-2023-31848

davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...

CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function...

Sql injection

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function...

CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function...

PT-2023-19479 · Davinci · Davinci

Name of the Vulnerable Software and Affected Versions: Davinci version 0.3.0-rc Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the copyDisplay function. Recommendations: For Davinci version 0.3.0-rc, consider disabling the copyDisplay...

CVE-2023-24206

Davinci v0.3.0-rc contains a SQL injection vulnerability via the copyDisplay function. Affected software: Davinci (version 0.3.0-rc). Root cause: improper handling in copyDisplay allows SQL injection, enabling attacker-supplied input to affect database queries. Impact (per CVSS in the entry): you...

CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function...

Davinci v0.3.0-rc SQL注入漏洞

Davinci is an edp open source DVsaaS Data Visualization Service platform. A security vulnerability exists in Davinci version v0.3.0-rc, which stems from the presence of a SQL injection vulnerability...

CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function...

PT-2025-40686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue involves a use-after-free condition within the cpufreq subsystem, specifically related to the davinci platform. The remove function first frees clock resources clks and then...

PT-2022-35024 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to the ethernet driver in the Linux Kernel, specifically the ti: davinci mdio module. A potential security vulnerability has been identified, although its actual impact an...

PT-2022-35294 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.75 Description: The issue is related to the ethernet driver in the Linux Kernel, specifically the ti: davinci mdio module. A workaround has been added for an errata, but the actual impact and attack...

GSD-2022-1003326 mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()

mfd: davincivoicecodec: Fix possible null-ptr-deref davincivcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...