Lucene search
+L

45 matches found

OSV
OSV
added 2024/04/22 2:08 p.m.18 views

CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue...

9.8CVSS7.4AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/22 12:00 a.m.12 views

PT-2024-21839 · Apache · Apache Hugegraph-Server

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Server versions 1.0.0 through 1.2.x Description: The issue is related to an Authentication Bypass by Spoofing. Users are recommended to upgrade to a newer version to fix the issue. Recommendations: For Apache HugeGraph-Server...

9.1CVSS7.2AI score0.01024EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2024/04/22 12:00 a.m.8 views

Apache HugeGraph 安全漏洞

Apache HugeGraph-Server is the United States Apache Apache Foundation of a fast, scalable graph database. A security bypass vulnerability exists in Apache HugeGraph-Server, which can be exploited by an attacker to bypass whitelisting by sending specially crafted requests in authentication mode...

9.1CVSS7AI score0.01024EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/22 12:00 a.m.3 views

Apache HugeGraph 安全漏洞

Apache HugeGraph is a fast and scalable graph database from the Apache USA Foundation. A command execution vulnerability exists in Apache HugeGraph-Server, which can be exploited by an attacker to execute arbitrary commands on a system...

9.8CVSS7.7AI score0.9921EPSS
SaveExploits11References6
Positive Technologies
Positive Technologies
added 2024/04/22 12:00 a.m.7 views

PT-2024-4007

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Server versions 1.0.0 through 1.3.0 Description: The issue affects Apache HugeGraph-Server, allowing unauthenticated remote code execution and server takeover. This flaw can be exploited by attackers to bypass sandbox...

10CVSS10AI score0.9921EPSS
SaveExploits11References79
Rows per page
Query Builder