CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

349 matches found

Veracode•added 2020/04/28 4:01 a.m.•44 views

Remote Code Execution

iotdb-server is vulnerable to remote code execution. The JMX port 31999 is exposed and allows an unauthenticated attacker to access and execute code on the system...

9.8CVSS5.2AI score0.02676EPSS

SaveExploits0References2Affected Software1

OSV•added 2020/04/27 5:15 p.m.•10 views

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

9.8CVSS7.4AI score

SaveExploits0References1

NVD•added 2020/04/27 5:15 p.m.•43 views

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

9.8CVSS9.6AI score0.02676EPSS

SaveExploits0References1

Prion•added 2020/04/27 5:15 p.m.•30 views

Code injection

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

7.5CVSS9.5AI score0.02676EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/04/27 4:16 p.m.•53 views

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

9.6AI score0.02676EPSS

SaveExploits0References1

CVE•added 2020/04/27 4:16 p.m.•134 views

CVE-2020-1952

Summary: CVE-2020-1952 affects Apache IoTDB (versions 0.8.0–0.8.2 and 0.9.0–0.9.1). The issue is that the JMX port 31999 is exposed at startup without authentication, allowing remote code execution by an unauthenticated attacker. The connected documents corroborate the same description across mul...

9.8CVSS9.5AI score0.02676EPSS

SaveExploits0References1Affected Software1

Mend•added 2020/04/27 4:16 p.m.•3 views

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

9.8CVSS0.02676EPSS

SaveExploits0References2

Positive Technologies•added 2020/04/27 12:00 a.m.•6 views

PT-2020-5583

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 0.8.0 through 0.8.2 Apache IoTDB versions 0.9.0 through 0.9.1 Description The issue is related to the exposure of the JMX port 31999 without certification in Apache IoTDB, allowing remote code execution. When IoTDB is...

10CVSS0.02676EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2020/04/27 12:00 a.m.•10 views

CVE-2020-1952: Improper Certificate Validation

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

9.8CVSS8.3AI score0.02676EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by