823 matches found
CVE-2020-1963
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
CVE-2020-1963
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
Design/Logic Flaw
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
CVE-2020-1963
Apache Ignite (which uses H2 for its distributed SQL execution) has a vulnerability where H2 SQL functions could be abused to access the filesystem. The connected advisories corroborate that this vulnerability involves file-system access via H2 within Ignite. No exploit specifics, affected versio...
CVE-2020-1963
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
CVE-2020-1963
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
PT-2020-15196
Name of the Vulnerable Software and Affected Versions Apache Ignite affected versions not specified Description The issue concerns Apache Ignite's use of the H2 database to build a SQL distributed execution engine. H2 provides SQL functions that could potentially be used by an attacker to access...
CVE-2020-1963: Missing Authorization
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem...
apache-ignite-users.70518.x6.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181838 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Ignite Realtime Spark Information Disclosure Vulnerability
Ignite Realtime Spark is an open source, cross-platform, real-time collaboration client application from the Ignite Realtime community. An information disclosure vulnerability exists in Ignite Realtime Spark version 2.8.3 Windows. A remote attacker can exploit this vulnerability to obtain and cra...
CVE-2020-12772
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
CVE-2020-12772
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
Design/Logic Flaw
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
CVE-2020-12772
CVE-2020-12772 affects Ignite Realtime Spark 2.8.3 on Windows and the ROAR plugin. A chat message can embed an IMG tag whose SRC points to an external host’s IP, causing the user’s NTLM hashes to be sent with the HTTP request when the host is accessed. This enables an attacker to collect hashes, ...
CVE-2020-12772
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
PT-2020-13255
Name of the Vulnerable Software and Affected Versions Ignite Realtime Spark version 2.8.3 Description A issue was discovered where a chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the us...
CVE-2020-12772: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...
CVE-2019-20526
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter...