CVE-2024-57622

MonetDB Server v11.49.1 contains a DoS vulnerability in the exp_bin component (CVE-2024-57622). Reported impact is DoS via crafted SQL statements. Exploitation status is indicated with a PoC in ADP 2.0.3. A patch/fix is not described in the provided connected documents; one PTSecurity note also s...

CVE-2024-57634

CVE-2024-57634 affects MonetDB Server, specifically the exp_copy component in v11.49.1. The issue allows an attacker to trigger a Denial of Service via crafted SQL statements. The impact is DoS with availability loss; there is no explicit exploitation detail in the provided documentation beyond t...

CVE-2024-57618

An issue in the bindcolexp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57619

CVE-2024-57619 concerns MonetDB Server, specifically the atom_get_int component in v11.47.11, where a flaw can allow a Denial of Service (DoS) through crafted SQL statements. Sources consistently cite MonetDB Server v11.47.11 as affected and do not cite a public fix version. A temporary mitigatio...

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57650

CVE-2024-57650 affects virtuoso-opensource v7.2.11 in the qi_inst_state_free component. An issue allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privileges, User interaction None; Availability impa...

CVE-2024-57657

The CVE-2024-57657 entry affects virtuoso-opensource, specifically the sqlg_vec_upd component in version 7.2.11, which can be exploited to cause a Denial of Service via crafted SQL statements. Public advisories (Amazon Linux 2 ALAS-2025-2755 / ALAS2-2025-2755) list a fix: upgrading to virtuoso-op...

CVE-2024-57648

An issue in the itcsetparamrow component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57628

An issue in the expvaluessetsupertype component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57649

An issue in the qstvecset component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57620

An issue in the trimchars component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57642

An issue in the dfeinxopcoldeftable component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57640

The CVE-2024-57640 entry affects virtuoso-opensource v7.2.11: the dc_add_int component allows an attacker to trigger a Denial of Service via crafted SQL statements. The connected Amazon Linux 2 advisories (ALAS/ALAS2-2025-2755) list this CVE among several DoS issues and specify a patch path to Vi...

CVE-2024-57631

MonetDB Server 11.49.1 contains a vulnerability in the exp_ref component that can trigger a Denial of Service through specially crafted SQL statements. Affected software: MonetDB Server (version 11.49.1). Nature of issue: SQL-injection-like flaw in exp_ref leading to DoS; root cause is not explic...

CVE-2024-57633

An issue in the expsbindcolumn component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57637

An issue in the dfeunitgbdependant component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57664

An issue in the sqlggroupnode component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57657

An issue in the sqlgvecupd component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

PT-2025-3495 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the exp values set supertype component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider...

CVE-2024-11773

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...