363 matches found
CVE-2025-64428
Dataease (open source data visualization/analysis tool) is affected by a JNDI injection vulnerability in versions prior to 2.10.17. A patch in 2.10.14 added a blacklist, but JNDI injections remain possible via the iiop, corbaname, and iiopname schemes. The issue is fixed in version 2.10.17. Affec...
CVE-2025-64428 DataEase DB2 JNDI Vulnerability
Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for version 2.10.14. However, JNDI injection remains possible via the iiop, corbaname, and iiopname schemes. The vulnerability has been fixed...
PT-2025-47608
Name of the Vulnerable Software and Affected Versions Dataease versions prior to 2.10.17 Description Dataease, an open source data visualization analysis tool, is susceptible to JNDI injection. A previous patch version 2.10.14 included a blacklist, but the issue persists through the iiop,...
CVE-2025-42884
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...
CVE-2025-42884 JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...
CVE-2025-42884 JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...
CVE-2025-64164
Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...
CVE-2025-64164
Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...
CVE-2025-64164 DataEase is vulnerable to Oracle JNDI Injection
Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...
Talos-Apache-Log-Oversight-Scanner
Talos-Apache-Log-Oversight-Scanner Overview The Talos-Ap...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Dem...
EUVD-2017-9245
Malware in sbrugna...
EUVD-2025-9898
Malicious code in bioql PyPI...
EUVD-2024-54107
Malicious code in bioql PyPI...
EUVD-2023-45841
Malicious code in bioql PyPI...
EUVD-2023-56362
Malicious code in bioql PyPI...
EUVD-2024-52643
Malicious code in bioql PyPI...
EUVD-2023-31601
Malicious code in bioql PyPI...