Lucene search
+L

48 matches found

Vulnrichment
Vulnrichment
•added 2024/04/22 2:08 p.m.•47 views

CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue...

9.6AI score0.9921EPSS
SaveExploits11References3
OSV
OSV
•added 2024/04/22 2:08 p.m.•25 views

CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue...

9.8CVSS7.4AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•17 views

PT-2024-21839 · Apache · Apache Hugegraph-Server

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Server versions 1.0.0 through 1.2.x Description: The issue is related to an Authentication Bypass by Spoofing. Users are recommended to upgrade to a newer version to fix the issue. Recommendations: For Apache HugeGraph-Server...

9.1CVSS7.2AI score0.01024EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•1 views

CVE-2024-27349: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.1CVSS5.8AI score0.01024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•2 views

CVE-2024-27348: Improper Access Control

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue...

9.8CVSS5.9AI score0.9921EPSS
SaveExploits11References2
CNNVD
CNNVD
•added 2024/04/22 12:00 a.m.•5 views

Apache HugeGraph 安全漏洞

Apache HugeGraph is a fast and scalable graph database from the Apache USA Foundation. A command execution vulnerability exists in Apache HugeGraph-Server, which can be exploited by an attacker to execute arbitrary commands on a system...

9.8CVSS7.7AI score0.9921EPSS
SaveExploits11References6
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•9 views

PT-2024-4007

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Server versions 1.0.0 through 1.3.0 Description: The issue affects Apache HugeGraph-Server, allowing unauthenticated remote code execution and server takeover. This flaw can be exploited by attackers to bypass sandbox...

10CVSS10AI score0.9921EPSS
SaveExploits11References79
CNNVD
CNNVD
•added 2024/04/22 12:00 a.m.•15 views

Apache HugeGraph 安全漏洞

Apache HugeGraph-Server is the United States Apache Apache Foundation of a fast, scalable graph database. A security bypass vulnerability exists in Apache HugeGraph-Server, which can be exploited by an attacker to bypass whitelisting by sending specially crafted requests in authentication mode...

9.1CVSS7AI score0.01024EPSS
SaveExploits0References3
Rows per page
Query Builder