Lucene search
+L

7 matches found

CVE
CVE
•added 2026/10/21 12:36 a.m.•3 views

CVE-2026-114059

ArcadeDB versions before 26.10.1 are vulnerable to remote code execution (RCE) due to missing scripting authorization checks in the GremlinQueryEngine.command() function. Authenticated users, including those with read-only reader roles, can submit Groovy code via the POST /api/v1/command/{databas...

7.7CVSS6.5AI score
SaveExploits0References2
CVE
CVE
•added 2026/08/19 2:02 p.m.•45 views

CVE-2026-76224

ArcadeDB (arcadedb-gremlin, versions ≤ 26.7.3) contains a remote code execution vulnerability in its Gremlin query engine. The root cause is that ArcadeGremlin.executeStatement() silently falls back to the insecure Groovy engine whenever a request carries any query parameter and the query does no...

8.8CVSS6.7AI score0.0085EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•9 views

CVE-2026-76224: Improper Control of Generation of Code

ArcadeDB before 26.8.1 arcadedb-gremlin, affected = 26.7.3 contains a remote code execution vulnerability in its Gremlin query engine. Although the engine defaults to the documented-secure java gremlin-lang engine, ArcadeGremlin.executeStatement silently falls back to the insecure Groovy engine...

8.8CVSS6.7AI score0.0085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•41 views

PT-2026-78406

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.8.1 Description The Gremlin query engine contains a flaw where the ArcadeGremlin.executeStatement function silently reverts to an insecure Groovy engine if a request includes any query parameter and the query fail...

8.8CVSS6.3AI score0.0085EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2023-50572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error. CVE-2023-50572 Note that Nessus relie...

5.5CVSS5.6AI score0.00255EPSS
SaveExploits1References2
osv_azl
osv_azl
•added 2023/12/29 3:15 p.m.•15 views

AZL-66920 CVE-2023-50572 affecting package jline 2.14.6-1

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...

5.5CVSS5.9AI score0.00255EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/12/29 12:00 a.m.•9 views

PT-2023-31595

Name of the Vulnerable Software and Affected Versions jline-groovy version 3.24.1 Description An issue in the component GroovyEngine.execute of jline-groovy allows attackers to cause an out of memory OOM error. Recommendations For version 3.24.1, consider disabling the GroovyEngine.execute...

5.5CVSS5.6AI score0.00255EPSS
SaveExploits1References18
Rows per page
Query Builder