Lucene search
+L

2088 matches found

CNNVD
CNNVD
added 2023/02/24 12:0 a.m.7 views

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Sqoop Provider...

9.8CVSS7.6AI score0.01895EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/24 12:0 a.m.10 views

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Hive Provider...

9.8CVSS7.6AI score0.01982EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/24 12:0 a.m.10 views

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Google Provider...

7.5CVSS6.6AI score0.01826EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/02/14 12:0 a.m.9 views

Apache Airflow Installed (Linux / Unix)

Binary data apacheairflownixinstalled.nbin...

7.3AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/01/21 3:30 p.m.57 views

Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.8CVSS8.8AI score0.11082EPSS
SaveExploits2References4Affected Software2
OSV
OSV
added 2023/01/21 3:30 p.m.3 views

GHSA-C732-XVV8-G94C Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.8CVSS5.9AI score0.11082EPSS
SaveExploits2References4
NVD
NVD
added 2023/01/21 2:15 p.m.22 views

CVE-2023-22884

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.8CVSS9.5AI score0.11082EPSS
SaveExploits2References2
Prion
Prion
added 2023/01/21 2:15 p.m.20 views

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

7.5CVSS9.4AI score0.11082EPSS
SaveExploits2References2Affected Software2
CVE
CVE
added 2023/01/21 1:2 p.m.125 views

CVE-2023-22884

CVE-2023-22884 affects Apache Airflow (core) and the Apache Airflow MySQL Provider, with the vulnerability stemming from improper neutralization of input in the LOAD DATA LOCAL INFILE flow, enabling Command Injection. Reported affected versions: Airflow before 2.5.1 and MySQL Provider before 4.0....

9.8CVSS9.5AI score0.11082EPSS
SaveExploits2References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/01/21 1:2 p.m.8 views

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

6.8AI score0.11082EPSS
SaveExploits2References2
OSV
OSV
added 2023/01/21 1:2 p.m.30 views

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.8CVSS7.2AI score0.11082EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2023/01/21 1:2 p.m.28 views

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.7AI score0.11082EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/01/21 12:0 a.m.5 views

Apache Airflow 命令注入漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other features. A command injection vulnerability exists in Apache Airflow versions prior to 2.5.1, Apache...

9.8CVSS8.3AI score0.11082EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2023/01/09 12:0 a.m.6 views

PT-2023-1279

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.5.1 Apache Airflow MySQL Provider versions prior to 4.0.0 Description The issue is related to the improper neutralization of special elements used in a command, which can lead to command injection. This can...

10CVSS8.5AI score0.11082EPSS
SaveExploits2References20
CNVD
CNVD
added 2022/12/26 12:0 a.m.37 views

Apache Airflow Command Injection Vulnerability (CNVD-2023-05224)

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. Apache Airflow is vulnerable to a command injection vulnerability that could be exploited by remote attackers to submit ad hoc requests that could execute arbitrary commands in th...

9.8CVSS5AI score0.0322EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/12/21 8:22 a.m.20 views

Command Injection

apacheairflowprovidersapachehive is vulnerable to command injection. The vulnerability exists because parameters are not properly defined in hook but in connection definition allowing an attacker to inject and execute arbitrary commands...

9.8CVSS9.5AI score0.0322EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/20 12:30 p.m.27 views

Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS8.9AI score0.0322EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/12/20 12:30 p.m.24 views

GHSA-RC58-QR9J-CPGW Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS9.5AI score0.0322EPSS
SaveExploits0References4
NVD
NVD
added 2022/12/20 11:15 a.m.34 views

CVE-2022-46421

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

9.8CVSS0.0322EPSS
SaveExploits0References2
Prion
Prion
added 2022/12/20 11:15 a.m.19 views

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

7.5CVSS9.5AI score0.0322EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder