Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-6562

Malware in sbrugna...

8.8CVSS8.6AI score0.00215EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-29361

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0055EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:57 a.m.4 views

CVE-2023-47118

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

9.8CVSS7.2AI score0.00387EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:52 p.m.7 views

CVE-2021-43304

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits...

8.8CVSS7.1AI score0.00149EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 6:51 p.m.5 views

CVE-2021-42388

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

8.1CVSS6.7AI score0.00279EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 6:47 p.m.6 views

CVE-2021-42387

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

8.1CVSS6.7AI score0.00241EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/02/05 2:50 a.m.4 views

CVE-2024-6873

It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time o...

8.1CVSS8.6AI score0.02221EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/03 12:0 a.m.14 views

CVE-2024-41436

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl...

8.1AI score0.002EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2024/09/03 12:0 a.m.12 views

CVE-2024-41436

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl...

7.5CVSS5.6AI score0.002EPSS
Exploits1
Prion
Prion
added 2019/10/31 7:15 p.m.12 views

Design/Logic Flaw

ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function...

5CVSS5.6AI score0.00522EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder