GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: solr, apache-hop-fips, jenkins-plugin-manager, liquibase, spark, gradle, neo4j, sonarqube, apache-activemq-artemis, apache-nifi, spdx-tools-java, jenkins, kafka, airflow, camunda-zeebe, cassandra-reaper, dependency-track, kserve-modelmesh,...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: solr, jenkins-plugin-manager, neo4j, sonarqube, apache-activemq-artemis, apache-nifi, spdx-tools-java, kafka, camunda-zeebe, cassandra-reaper, ghidra, apicurio-registry, solr-fips, hadoop-fips, druid, hadoop-client-modules, akhq, confluent-kafka-jre-bcfips,...

CVE-2023-23926

APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...

CVE-2021-42767

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1...

CVE-2021-34802

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges...

CVE-2021-34371

Neo4j through 3.4.18 with the shell server enabled exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains...

CVE-2018-18389

Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization, allows an attacker to log into the server by sending any valid username with an arbitrary password...

GHSA-889J-63JV-QHR8 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2025-1948 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2025-1948 vulnerabilities

Vulnerabilities for packages: neo4j...

GHSA-889J-63JV-QHR8 vulnerabilities

Vulnerabilities for packages: neo4j...

Malicious code in neo4j-apoc-procedures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3195 Malicious code in neo4j-apoc-procedures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3194 Malicious code in neo4j-apoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446dfffd9d2f4e171ae7e9e3d88c997b8c9c9437d3f9c6b47174ad17ac40a651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neo4j-apoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446dfffd9d2f4e171ae7e9e3d88c997b8c9c9437d3f9c6b47174ad17ac40a651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BIT-NEO4J-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

GHSA-QH8G-58PP-2WXH vulnerabilities

Vulnerabilities for packages: solr, apache-pulsar-fips, spark, neo4j, zookeeper-fips, reposilite, apache-nifi, cassandra-reaper, pinot-fips, spark-kubernetes-operator-fips, zookeeper, pinot, spark-kubernetes-operator, spark-fips, clojure, apache-tika, clojure-tools, hadoop-client-modules, akhq,...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: druid, celeborn, cassandra-reaper, cloudwatch-exporter, solr, spark, confluent-kafka, spark-fips, strimzi-kafka-operator, apache-tika, zookeeper-fips, zookeeper, apache-nifi, confluent-kafka-jre-bcfips, kafka...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: druid, celeborn, cassandra-reaper, cloudwatch-exporter, solr, spark, confluent-kafka, spark-fips, strimzi-kafka-operator, apache-tika, zookeeper-fips, zookeeper, apache-nifi, confluent-kafka-jre-bcfips, kafka...

CVE-2024-6763 vulnerabilities

Vulnerabilities for packages: solr, apache-pulsar-fips, spark, neo4j, zookeeper-fips, reposilite, apache-nifi, cassandra-reaper, pinot-fips, spark-kubernetes-operator-fips, zookeeper, pinot, spark-kubernetes-operator, spark-fips, clojure, apache-tika, clojure-tools, hadoop-client-modules, akhq,...