132 matches found
cve-2023-38646-poc
Metabase Pre Authentication RCE CVE-2023-38646 CVE-2023-38646は、Metabaseにおけるリモートコード実行（RCE）の脆弱性です。この脆弱性は、Metabaseが認証されていないAPIエンドポイント/api/setup/validateを処理する際に、JDBC接続文字列の処理にセキュリティ上の欠陥があることに起因します。攻撃者は特定のJDBC接続文字列を構築することにより、認証を必要とせずにこのエンドポイントを利用してサーバー上で任意のコマンドを実行できます。...
CVE-2026-12717
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
EUVD-2026-66420
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
PT-2026-82091
Name of the Vulnerable Software and Affected Versions Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 Description Improper input validation in the CData JDBC driver integration allows an authenticated attacker to achieve remote code execution within the connector containe...
CVE-2026-9762
CVE-2026-9762 affects IBM Db2 Client components: the IBM Data Server Driver for JDBC and SQLJ. A remote code execution (RCE) exists when the JDBC URL is under user control. Affected products/versions: Db2 client 11.5.0–11.5.9 and 12.1.0–12.1.4. Root cause identified as CWE-94 (Improper Code Gener...
CVE-2026-8178: Use of Externally-Controlled Input to Select Classes or Code
An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potentially execute code in the application...
RCE (Remote Code Execution) at c3p0 dependency in Crucible Server
This High severity RCE Remote Code Execution vulnerability was introduced in version 4.9.0 of Crucible Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.9 and a CVSS Vector of code:java CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H code allows an...
CVE-2025-70829
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string...
CVE-2025-70829: Exposure of Sensitive Information to an Unauthorized Actor
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string...
EUVD-2005-1744
Malware in sbrugna...
EUVD-2004-1752
Malware in sbrugna...
EUVD-2025-6385
Malicious code in bioql PyPI...
EUVD-2024-2782
Malicious code in bioql PyPI...
EUVD-2025-6384
Malicious code in bioql PyPI...
EUVD-2025-19595
Malicious code in bioql PyPI...
EUVD-2024-52861
Malicious code in bioql PyPI...
EUVD-2022-7150
Malicious code in bioql PyPI...