CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2721 matches found

Tenable Nessus•added 2023/02/14 12:00 a.m.•10 views

Apache Airflow Installed (Linux / Unix)

Binary data apacheairflownixinstalled.nbin...

7.3AI score

SaveExploits0References1

OSV•added 2023/01/21 3:30 p.m.•16 views

GHSA-C732-XVV8-G94C Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

9.8CVSS5.9AI score0.11082EPSS

SaveExploits2References4

Github Security Blog•added 2023/01/21 3:30 p.m.•74 views

Command Injection in Apache Airflow and Apache Airflow MySQL Provider

9.8CVSS8.8AI score0.11082EPSS

SaveExploits2References4Affected Software2

NVD•added 2023/01/21 2:15 p.m.•34 views

CVE-2023-22884

9.8CVSS9.5AI score0.11082EPSS

SaveExploits2References2

Prion•added 2023/01/21 2:15 p.m.•25 views

Command injection

7.5CVSS9.4AI score0.11082EPSS

SaveExploits2References2Affected Software2

OSV•added 2023/01/21 1:02 p.m.•36 views

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

9.8CVSS7.2AI score

SaveExploits0References4

Mend•added 2023/01/21 1:02 p.m.•4 views

CVE-2023-22884

9.8CVSS0.11082EPSS

SaveExploits2References8

Vulnrichment•added 2023/01/21 1:02 p.m.•10 views

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

6.8AI score0.11082EPSS

SaveExploits2References2

CVE•added 2023/01/21 1:02 p.m.•152 views

CVE-2023-22884

CVE-2023-22884 affects Apache Airflow (core) and the Apache Airflow MySQL Provider, with the vulnerability stemming from improper neutralization of input in the LOAD DATA LOCAL INFILE flow, enabling Command Injection. Reported affected versions: Airflow before 2.5.1 and MySQL Provider before 4.0....

9.8CVSS9.5AI score0.11082EPSS

SaveExploits2References2Affected Software2

Cvelist•added 2023/01/21 1:02 p.m.•40 views

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

9.7AI score0.11082EPSS

SaveExploits2References2

CNNVD•added 2023/01/21 12:00 a.m.•18 views

Apache Airflow 命令注入漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other features. A command injection vulnerability exists in Apache Airflow versions prior to 2.5.1, Apache...

9.8CVSS8.3AI score0.11082EPSS

SaveExploits2References3

Rapid7 Vulnerability Database (full)•added 2023/01/21 12:00 a.m.•3 views

CVE-2023-22884: Improper Neutralization of Special Elements used in a Command

9.8CVSS5.8AI score0.11082EPSS

SaveExploits2References2

Positive Technologies•added 2023/01/09 12:00 a.m.•13 views

PT-2023-1279

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.5.1 Apache Airflow MySQL Provider versions prior to 4.0.0 Description The issue is related to the improper neutralization of special elements used in a command, which can lead to command injection. This can...

10CVSS8.5AI score0.11082EPSS

SaveExploits2References20

CNVD•added 2022/12/26 12:00 a.m.•107 views

Apache Airflow Command Injection Vulnerability (CNVD-2023-05224)

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. Apache Airflow is vulnerable to a command injection vulnerability that could be exploited by remote attackers to submit ad hoc requests that could execute arbitrary commands in th...

9.8CVSS5AI score0.03308EPSS

SaveExploits0References1

Veracode•added 2022/12/21 8:22 a.m.•25 views

Command Injection

apacheairflowprovidersapachehive is vulnerable to command injection. The vulnerability exists because parameters are not properly defined in hook but in connection definition allowing an attacker to inject and execute arbitrary commands...

9.8CVSS9.5AI score0.03308EPSS

SaveExploits0References3Affected Software1

OSV•added 2022/12/20 12:30 p.m.•87 views

GHSA-RC58-QR9J-CPGW Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS9.5AI score0.03308EPSS

SaveExploits0References4

Github Security Blog•added 2022/12/20 12:30 p.m.•38 views

Apache Airflow Hive Provider vulnerable to Command Injection

9.8CVSS8.9AI score0.03308EPSS

SaveExploits0References4Affected Software1

NVD•added 2022/12/20 11:15 a.m.•43 views

CVE-2022-46421

9.8CVSS0.03308EPSS

SaveExploits0References2

Prion•added 2022/12/20 11:15 a.m.•25 views

Command injection

7.5CVSS9.5AI score0.03308EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2022/12/20 10:20 a.m.•14 views

CVE-2022-46421 Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params

9.6AI score0.03308EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by