EUVD-2024-24642

Malicious code in bioql PyPI...

EUVD-2024-23578

Malicious code in bioql PyPI...

CVE-2024-48019

Apache Doris is vulnerable to a path traversal vulnerability caused by the software's failure to properly filter special elements in the path of a resource or file. Application administrators can exploit this flaw, specifically through the REST API , to read arbitrary files from the server's file...

CVE-2024-27438

Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code...

PT-2024-2423 · Apache · Apache Doris

Name of the Vulnerable Software and Affected Versions: Apache Doris versions 1.2.0 through 2.0.4 Description: The issue is related to the download of code without integrity check in Apache Doris, which may result in remote command execution. An attacker authorized to create a JDBC catalog can use...