110 matches found
Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in the PostgreSQL JDBC driver and Apache Neethi Vulnerability Details CVEID:CVE-2026-42402 DESCRIPTION: Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Speciall...
CVE-2026-3293 snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos
A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts...
EUVD-2021-32186
Malicious code in bioql PyPI...
EUVD-2022-5169
Malicious code in bioql PyPI...
H2O security vulnerabilities
H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A security vulnerability exists in H2O 3.46.08 and earlier versions, which stems from an incorrect manipulation of the parameter connectionurl in the file /99/ImportSQLTable in the H2 JDBC Driver...
Linux Distros Unpatched Vulnerability : CVE-2021-20328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server's...
Snowflake JDBC security vulnerabilities
Snowflake JDBC is an application from Snowflake, Inc. provides a JDBC type 4 driver that supports the core functionality and allows Java programs to connect to Snowflak. A security vulnerability exists in Snowflake JDBC versions prior to 3.22.0 that stems from caching temporary credentials in a...
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 270. Vulnerability Details CVEID:CVE-2024-29133 DESCRIPTION: Apache Commons Configuration could allow a remote attacker to execute arbitrary code on the system, caused by ...
CVE-2023-27867
IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteServerListJNDIName, an attacker could exploit this...
PostgreSQL JDBC Driver security vulnerabilities
PostgreSQL JDBC Driver is an open source JDBC driver written in Pure Java Type 4 for communication in the PostgreSQL native network protocol . An information disclosure vulnerability exists in PostgreSQL JDBC Driver. The vulnerability stems from the fact that a preprocessing statement using...
GHSA-RGHW-6PX2-FGWC Improper Certificate Validation in MongoDB
Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...
ai.tripl:arc-mongodb-pipeline-plugin_2.12 (>=1.3.0, <=1.4.0), be.personify.iam:personify-scim-server (>=1.1.5.release, <=1.2.5.release) +346 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.12.0, <=3.12.7)
org.mongodb:mongo-java-driver MAVEN version =3.12.0, =1.3.0, =1.1.5.release, =1.3.0, =1.3.0, =1.2.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =3.13.0, =3.13.0, =3.15.3, =3.16.3 - ch.exense.step:step-controller-plugins-measurements-jdbc 3.15.3 - ch.exense.step:step-controller-plugins-measurements-log 3.15....
ai.tripl:arc-mongodb-pipeline-plugin_2.12 (>=1.3.0, <=1.4.0), be.personify.iam:personify-scim-server (>=1.1.5.release, <=1.2.5.release) +346 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.12.0, <=3.12.7)
org.mongodb:mongo-java-driver MAVEN version =3.12.0, =1.3.0, =1.1.5.release, =1.3.0, =1.3.0, =1.2.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =3.13.0, =3.13.0, =3.15.3, =3.16.3 - ch.exense.step:step-controller-plugins-measurements-jdbc 3.15.3 - ch.exense.step:step-controller-plugins-measurements-log 3.15....
Improper Certificate Validation in MongoDB
Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...
ch.software-atelier:simpleflex-auth (>=2.1.1, <=2.2.4), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +227 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.11.0, <=3.11.2)
org.mongodb:mongo-java-driver MAVEN version =3.11.0, =2.1.1, =0.1.28, =0.1.0, =1.0.0-rc1, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.1.8, =5.1.8, =5.6.2, =5.6.4 and more Source cves: CVE-2021-20328 Source advisory: GHSA-RGHW-6PX2-FGWC...
ch.software-atelier:simpleflex-auth (>=2.1.1, <=2.2.4), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +227 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.11.0, <=3.11.2)
org.mongodb:mongo-java-driver MAVEN version =3.11.0, =2.1.1, =0.1.28, =0.1.0, =1.0.0-rc1, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.1.8, =5.1.8, =5.6.2, =5.6.4 and more Source cves: CVE-2021-20328 Source advisory: OSV:GHSA-RGHW-6PX2-FGWC...
CVE-2021-45414
A Remote Code Execution RCE vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment or Java driver...
CVE-2021-45414
A Remote Code Execution RCE vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment or Java driver...
