com.scylladb:scylla-cdc-source-connector (>=1.0.0, <=1.2.2), io.debezium:debezium-connector-db2 (1.4.1.final) +29 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.4.1.final)

io.debezium:debezium-core MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.scylladb:scylla-cdc-source-connector =1.0.0, =1.2.2 - io.debezium:debezium-connector-db2 1.4.1.fina...

org.apache.camel.springboot:camel-debezium-sqlserver-starter (3.12.0), org.apache.camel:camel-debezium-sqlserver (3.12.0) potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.6.2.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - org.apache.camel.springboot:camel-debezium-sqlserver-starter 3.12.0 -...

io.cdap.delta:database-delta-plugins (>=0.1.1, <=0.1.3), io.debezium:debezium-connector-mongodb (0.9.5.final) +10 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.9.5.final)

io.debezium:debezium-core MAVEN version 0.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.cdap.delta:database-delta-plugins =0.1.1, =3.0.0-rc2, =3.0.0-rc2, =3.0.0-rc3 Source cves:...

cn.tenmg:flink-connector-sqlserver-cdc-log (1.0.0), com.ascentstream.pulsar:pulsar-io-debezium-mssql (>=2.10.6.9, <=2.10.7.4) +28 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (>=0.10.0.final, <=2.2.1.final)

io.debezium:debezium-connector-sqlserver MAVEN version =0.10.0.final, =2.10.6.9, =2.2.0, =0.1.0, =0.4.1, =master-rc-daily, =0.1.0, =1.0.0-m6, =1.0.0-m6, =1.0.0-m6, =3.0.0, =3.0.0, =3.1.0, =3.7.0-2.2 and more Source cves: CVE-2023-1419 Source advisory: MEND:C...

CVE-2024-49043 Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

...

CVE-2024-49043 Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

...

dbt (0.19.0rc2), dbt-bigquery (0.19.0rc2) +3 more potentially affected by CVE-2024-40637 via dbt-core (0.19.0rc2)

dbt-core PYPI version 0.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.0rc2 - dbt-bigquery 0.19.0rc2 - dbt-postgres 0.19.0rc2 - dbt-redshift 0.19.0rc2 - dbt-sqlserver 0.19.0rc2 Source cves: CVE-2024-406...

airflow-dbt-python (>=0.5.1, <=0.7.2), dbt (0.20.2) +12 more potentially affected by CVE-2024-40637 via dbt-core (0.20.2)

dbt-core PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - airflow-dbt-python =0.5.1, =0.2.0, =0.2.0, =0.20.0rc1, =0.2.0a0, =0.2.0 Source cves: CVE-2024-40637 Source advisory: OSV:PYSEC-2024-66...

Malicious code in NServісеBus.SqlServеr.Native (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in NServіcеBus.SqlServer.Native (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderen.Basisregisters.MessageHandlіng.Kafka.Consսmer.SqlServer (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4394 Malicious code in Bе.Vlaanderen.Basisregіsters.MessageHandlіng.Kafka.Consսmer.SqlServer (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bе.Vlaanderen.Basisregіsters.MessageHandlіng.Kafka.Consսmer.SqlServer (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-46601

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to...

Design/Logic Flaw

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to...

CVE-2023-46601

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to...

CVE-2023-46601

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to...

CVE-2023-46601

Summary of CVE-2023-46601 : Siemens COMOS (All versions) is affected by an access control vulnerability in the SQLServer connection path, enabling an attacker to query the database and access information beyond the user’s rights. The issue is described across multiple feeds as an improper access ...

PT-2023-6872

Name of the Vulnerable Software and Affected Versions COMOS All versions Description The issue is related to inadequate access controls in the COMOS application, specifically when making a connection to the SQLServer. This could allow a remote attacker to directly query the database, accessing...

CVE-2023-46601: Improper Access Control

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to...