Lucene search
+L

21 matches found

Kitploit
Kitploit
•added 2026/10/10 6:18 a.m.•14 views

CVE-2022-22733

CVE-2022-22733 CVE-2022-22733 es una vulnerabilidad que afecta a Apache ShardingSphere ElasticJob-UI 3.0.0 y versiones anteriores. La vulnerabilidad conduce a una escalada de privilegios. Pero, abusando de los privilegios escalados, se puede realizar un ataque JDBC y lograr RCE. Puedes leer el...

6.5CVSS7.2AI score0.37594EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:48 a.m.•25 views

CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

8.5CVSS6.7AI score0.00683EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2022-54255

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00683EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•18 views

The vulnerability of the Lite UI user interface library used in Apache ShardingSphere ElasticJob-UI for task scheduling arises from an internal index assignment error. This error allows attackers to gain unauthorized access to protected information.

The vulnerability of the Lite UI user interface library used in the Apache ShardingSphere ElasticJob-UI task scheduling software is related to an error in the assignment of the internal interface index. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

8.5CVSS5.5AI score0.00683EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/06 2:23 p.m.•10 views

CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

6.8AI score0.00683EPSS
SaveExploits0References1
Mend
Mend
•added 2025/02/06 2:23 p.m.•4 views

CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

9CVSS0.00683EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/02/06 2:23 p.m.•57 views

CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

0.00683EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/06 2:23 p.m.•90 views

CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI is vulnerable to Remote Code Execution (RCE) in versions 3.0.1 and prior . The root cause is the improper handling of a specially constructed JDBC URL for an H2 database , which allows an attacker to execute arbitrary code. This attack requires t...

8.5CVSS6.5AI score0.00683EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/02/06 2:23 p.m.•17 views

CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

8.5CVSS7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•7 views

CVE-2022-31764: Improper Control of Dynamically-Managed Code Resources

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

8.5CVSS5.7AI score0.00683EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2023/04/25 11:39 a.m.•314 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Apache Shardingsphere_Elasticjob-Ui

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects...

6.5CVSS6.7AI score0.37594EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/11/01 12:00 a.m.•20 views

PT-2025-5826 · Apache · Apache Shardingsphere Elasticjob-Ui

Name of the Vulnerable Software and Affected Versions: Apache ShardingSphere ElasticJob-UI versions prior to 3.0.2 Description: The issue allows an attacker to perform remote code execution RCE by constructing a special JDBC URL of the H2 database. The premise of this attack is that the attacker...

8.5CVSS7.2AI score0.00683EPSS
SaveExploits0References7
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•85 views

Apache ShardingSphere Information Disclosure Vulnerability

Apache ShardingSphere is an open source distributed database middleware solution from the Apache Foundation.Apache ShardingSphere ElasticJob-UI is vulnerable to an information disclosure vulnerability that stems from the exposure of sensitive information to unauthorized participants, which could ...

6.5CVSS2.5AI score0.37594EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/20 11:15 a.m.•33 views

CVE-2022-22733

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.5CVSS0.37594EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/20 11:15 a.m.•21 views

Privilege escalation

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

4CVSS6.4AI score0.37594EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/01/20 10:25 a.m.•1 views

CVE-2022-22733

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

7.1CVSS0.37594EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/01/20 10:25 a.m.•35 views

CVE-2022-22733 Access-Token in ElasticJob UI causes password disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.6AI score0.37594EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/20 10:25 a.m.•38 views

CVE-2022-22733 Access-Token in ElasticJob UI causes password disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.6AI score
SaveExploits0References4
CVE
CVE
•added 2022/01/20 10:25 a.m.•143 views

CVE-2022-22733

Apache ShardingSphere ElasticJob-UI (3.x, v3.0.0 and earlier) is affected by CVE-2022-22733, which allows a guest account to escalate privileges due to exposure of sensitive information to an unauthorized actor. Technical details from connected sources confirm the vulnerable component is ElasticJ...

6.5CVSS6.4AI score0.37594EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•3 views

CVE-2022-22733: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.5CVSS5.8AI score0.37594EPSS
SaveExploits1References3
Rows per page
Query Builder