Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-32301

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01804EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:1 a.m.2 views

CVE-2023-28637

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerabili...

8.8CVSS8AI score0.01804EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/01/17 12:0 a.m.7 views

AWS RedShift Python Connector Detection

Binary data pythonredshiftconnectordetect.nbin...

7.3AI score
Exploits0References1
NVD
NVD
added 2023/03/28 9:15 p.m.19 views

CVE-2023-28637

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerabili...

8.8CVSS8.3AI score0.01804EPSS
Exploits1References1
Prion
Prion
added 2023/03/28 9:15 p.m.13 views

Remote code execution

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerabili...

6.5CVSS8.8AI score0.01804EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/28 8:2 p.m.7 views

CVE-2023-28637 DataEase AWS redshift data source exists for remote code execution vulnerability

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerabili...

8CVSS9AI score0.01804EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/03/28 8:2 p.m.12 views

CVE-2023-28637 DataEase AWS redshift data source exists for remote code execution vulnerability

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerabili...

8CVSS9.1AI score0.01804EPSS
Exploits1References1
OSV
OSV
added 2023/03/28 8:2 p.m.14 views

CVE-2023-28637 DataEase AWS redshift data source exists for remote code execution vulnerability

DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerabili...

8CVSS8.9AI score0.01804EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/03/28 12:0 a.m.2 views

PT-2023-21865 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 1.18.5 Description: DataEase is an open source data visualization analysis tool where users can modify data, and data sources are expected to sanitize data properly. However, the AWS redshift data source does not...

8.8CVSS8.8AI score0.01804EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/09/30 12:0 a.m.45 views

Duplicate Advisory: AWS Redshift JDBC Driver fails to validate class type during object instantiation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jc69-hjw2-fm86. This link is maintained to preserve external references. Original Description In Amazon AWS Redshift JDBC Driver aka amazon-redshift-jdbc-driver or redshift-jdbc42 before 2.1.0.8, the Object...

8.8CVSS7AI score0.09641EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/29 12:0 a.m.8 views

CVE-2022-41828

In Amazon AWS Redshift JDBC Driver aka amazon-redshift-jdbc-driver or redshift-jdbc42 before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name...

8.1AI score0.09641EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/09/29 12:0 a.m.16 views

CVE-2022-41828

In Amazon AWS Redshift JDBC Driver aka amazon-redshift-jdbc-driver or redshift-jdbc42 before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name...

8.3AI score0.09641EPSS
Exploits1References2
Rows per page
Query Builder