637 matches found
CVE-2026-119084
The Amazon Redshift JDBC Driver prior to version 2.3.0 is vulnerable to Remote Code Execution (RCE) due to unsafe reflection in the connection parameter and credentials profile handling. An attacker capable of influencing the JDBC connection URL or the AWS credentials profile may execute arbitrar...
CVE-2026-120953
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
EUVD-2026-116142
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
CVE-2026-120953
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver (versions
CVE-2026-120953 Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
dbeaver
DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...
progress-burp
Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...
jdbc-sqlxml-xxe
jdbc-sqlxml-xxe h2-jdbc CVE-2021-23463 https://github.com/h2database/h2database/issues/3195 SQLXML XXE vulnerability reproduction. mysql-jdbc CVE-2021-2471 SQLXML XXE vulnerability reproduction...
CVE-2022-41828
CVE-2022-41828 Amazon AWS Redshift JDBC Driver Remote Code Execution RCE The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. The Driver...
hekate
Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...
CVE-2023-21971_Analysis
CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...
CLEANSTART-2024-BJ87056 PostgreSQL JDBC Driver (aka PgJDBC) before 42
Security vulnerability affects the java-postgresql-jdbc package. PostgreSQL JDBC Driver aka PgJDBC before 42...
CLEANSTART-2024-BR64621 PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code
Security vulnerability affects the java-postgresql-jdbc package. PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Java code...
CLEANSTART-2026-ZM12186 pgjdbc is an open source postgresql JDBC Driver
Security vulnerability affects the druid-fips package. pgjdbc is an open source postgresql JDBC Driver...
xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1
SQLite JDBC Driver SQLite JDBC is a library for accessing and creating SQLite database files in Java. Our SQLiteJDBC library requires no configuration since native libraries for major OSs, including Windows, macOS, Linux etc., are assembled into a single JAR Java Archive file. Usage ➡️ More usage...
CLEANSTART-2026-VI37845 Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements...
Security vulnerability affects the apache-hive package. Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via httpclientimpl connection property; however, the driver does not verify if the class implements the expected interface before instantiating it...
CLEANSTART-2026-RA20453 Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network
Security vulnerability affects the apache-hive package. Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...
Security Bulletin:Multiple vulnerabilities in postgresql may affect IBM Infosphere Change Data Capture (CVE-2026-107314, CVE-2026-107315)
Summary Multiple security vulnerabilities have been identified in postgresql, PostgreSQL JDBC Driver Postgresql. postgresql is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a 'Failing Open' issue in pgjdbc PostgreSQL JDBC Driver (CVE-2026-54291)
Summary IBM Watson Speech Services Cartridge is vulnerable to a 'Failing Open' issue in pgjdbc PostgreSQL JDBC Driver. This is due to a flaw which allows channelBinding=require connections to be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it,...