Lucene search
+L

278 matches found

OSV
OSV
•added 2024/01/15 12:30 p.m.•32 views

GHSA-RXGG-273W-RFW7 Remote Code Execution vulnerability in Apache IoTDB via UDF

Remote Code Execution vulnerability in Apache IoTDB. This issue affects Apache IoTDB from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS9.7AI score0.01917EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/01/15 12:30 p.m.•41 views

Remote Code Execution vulnerability in Apache IoTDB via UDF

Remote Code Execution vulnerability in Apache IoTDB. This issue affects Apache IoTDB from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS9.7AI score0.01917EPSS
SaveExploits0References5Affected Software2
Prion
Prion
•added 2024/01/15 11:15 a.m.•24 views

Remote code execution

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

7.5CVSS7.7AI score0.01917EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2024/01/15 11:15 a.m.•15 views

PYSEC-2024-11

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS7.5AI score0.01917EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/01/15 11:15 a.m.•40 views

PYSEC-2024-11

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS9.8AI score0.01917EPSS
SaveExploits0References4
Mend
Mend
•added 2024/01/15 10:35 a.m.•1 views

CVE-2023-46226

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS0.01917EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/01/15 10:35 a.m.•4 views

CVE-2023-46226 Apache IoTDB: Remote Code Execution (RCE) risk via the UDF

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.7AI score0.01917EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/15 10:35 a.m.•122 views

CVE-2023-46226

CVE-2023-46226 is an RCE issue in Apache IoTDB affecting 1.0.0–1.2.2. The vulnerability is tied to a UDF path/operation (as reflected across multiple sources) and is mitigated by upgrading to 1.3.0. Exploitation details are not provided in the supplied documents. Remediation: upgrade to IoTDB 1.3...

9.8CVSS9.8AI score0.01917EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/01/15 10:35 a.m.•50 views

CVE-2023-46226 Apache IoTDB: Remote Code Execution (RCE) risk via the UDF

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

10AI score0.01917EPSS
SaveExploits0References2
OSV
OSV
•added 2024/01/15 10:35 a.m.•12 views

CVE-2023-46226 Apache IoTDB: Remote Code Execution (RCE) risk via the UDF

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS7.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/01/15 12:00 a.m.•13 views

PT-2024-1462 · Apache · Apache Iotdb

Name of the Vulnerable Software and Affected Versions: Apache IoTDB versions 1.0.0 through 1.2.2 Description: The issue is a Remote Code Execution vulnerability in Apache IoTDB, which exists due to insufficient input validation. This allows a remote attacker to execute arbitrary code. Users are...

10CVSS9.7AI score0.01917EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•2 views

CVE-2023-46226: Improper Control of Generation of Code

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

9.8CVSS8.2AI score0.01917EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2023/12/21 12:30 p.m.•33 views

Apache IoTDB: Unsafe deserialize map in Sync Tool

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

9.8CVSS9.5AI score0.01035EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/12/21 12:30 p.m.•90 views

GHSA-F23H-52HJ-99P6 Apache IoTDB: Unsafe deserialize map in Sync Tool

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

9.8CVSS9.4AI score0.01035EPSS
SaveExploits0References4
NVD
NVD
•added 2023/12/21 12:15 p.m.•51 views

CVE-2023-51656

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

9.8CVSS0.01035EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/21 12:15 p.m.•31 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

7.5CVSS7AI score0.01035EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/12/21 11:47 a.m.•12 views

CVE-2023-51656 Apache IoTDB: Unsafe deserialize map in Sync Tool

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

7.2AI score
SaveExploits0References4
Mend
Mend
•added 2023/12/21 11:47 a.m.•2 views

CVE-2023-51656

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

9.8CVSS0.01035EPSS
SaveExploits0References5
CVE
CVE
•added 2023/12/21 11:47 a.m.•134 views

CVE-2023-51656

CVE-2023-51656 concerns Apache IoTDB's Deserialization of Untrusted Data. The Red Hat/Veracode/CNVD/Sources show the vulnerability affects IoTDB releases 0.13.0–0.13.4 and can lead to arbitrary code execution via deserializing untrusted data. The issue is mitigated by upgrading to IoTDB 1.2.2, wh...

9.8CVSS9.5AI score0.01035EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/12/21 11:47 a.m.•62 views

CVE-2023-51656 Apache IoTDB: Unsafe deserialize map in Sync Tool

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

9.7AI score0.01035EPSS
SaveExploits0References2
Rows per page
Query Builder