Lucene search
K

18 matches found

EUVD
EUVD
added 2025/11/11 3:30 a.m.1 views

EUVD-2025-60984

Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability o...

6.9CVSS6.3AI score0.00017EPSS
Exploits0References3
CVE
CVE
added 2025/11/11 12:19 a.m.6 views

CVE-2025-42895

CVE-2025-42895 affects the SAP HANA JDBC Client. The vulnerability arises from insufficient validation of connection property values, allowing a high-privilege, locally authenticated user to supply crafted parameters that lead to unauthorized code loading. According to the connected sources, the ...

6.9CVSS6.4AI score0.00017EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 11:2 a.m.34 views

BIT-POSTGRESQL-JDBC-DRIVER-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

9.8CVSS9.3AI score0.01277EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:8 a.m.2 views

SUSE CVE-2016-1015

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified "type confusion," a different vulnerability than...

8.8CVSS8AI score0.08291EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.1 views

SUSE CVE-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

6.3CVSS8.2AI score0.01277EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2022/10/06 12:26 p.m.1 views

postgresql-jdbc: Arbitrary File Write Vulnerability

A flaw was found in Postgres JDBC. This flaw allows an attacker to use a method to write arbitrary files through the connection properties settings. For example, an attacker can create an executable file under the server the application is running and make it a new part of the application or serv...

9.8CVSS7.4AI score0.01277EPSS
Exploits0References4
Veracode
Veracode
added 2022/10/05 10:31 p.m.32 views

Arbitrary File Write

postgresql-jdbc is vulnerable to arbitrary file writes. The vulnerability exists because the connection properties for configuring a pgjdbc connection are exposed which allows an attacker to specify arbitrary connection properties could lead to a compromise of a system...

9.8CVSS8.9AI score0.01277EPSS
Exploits0References10Affected Software1
RedHat Linux
RedHat Linux
added 2022/10/05 10:44 a.m.1 views

postgresql-jdbc: Arbitrary File Write Vulnerability

A flaw was found in Postgres JDBC. This flaw allows an attacker to use a method to write arbitrary files through the connection properties settings. For example, an attacker can create an executable file under the server the application is running and make it a new part of the application or serv...

9.8CVSS7.4AI score0.01277EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/07/07 2:19 p.m.1 views

postgresql-jdbc: Arbitrary File Write Vulnerability

A flaw was found in Postgres JDBC. This flaw allows an attacker to use a method to write arbitrary files through the connection properties settings. For example, an attacker can create an executable file under the server the application is running and make it a new part of the application or serv...

9.8CVSS7.4AI score0.01277EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/07/07 2:19 p.m.1 views

jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

9.8CVSS7.7AI score0.04056EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/03/11 12:2 a.m.34 views

Path traversal in org.postgresql:postgresql

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

9.8CVSS8.9AI score0.01277EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/03/10 5:47 p.m.6 views

CVE-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

9.8CVSS9.4AI score
Exploits0References5
NVD
NVD
added 2022/03/10 5:47 p.m.21 views

CVE-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

9.8CVSS0.01277EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/03/10 5:47 p.m.46 views

CVE-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

9.8CVSS7.1AI score0.01277EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/03/07 5:0 p.m.26 views

CVE-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

9.6AI score0.01277EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/02/16 12:8 a.m.73 views

pgjdbc Arbitrary File Write Vulnerability

Overview The connection properties for configuring a pgjdbc connection are not meant to be exposed to an unauthenticated attacker. While allowing an attacker to specify arbitrary connection properties could lead to a compromise of a system, that's a defect of an application that allows...

8.1AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/02/02 12:4 a.m.80 views

pgjdbc Does Not Check Class Instantiation when providing Plugin Classes

Impact pgjdbc instantiates plugin instances based on class names provided via authenticationPluginClassName, sslhostnameverifier, socketFactory, sslfactory, sslpasswordcallback connection properties. However, the driver did not verify if the class implements the expected interface before...

9.8CVSS4.6AI score0.04056EPSS
Exploits1References8Affected Software1
myhack58
myhack58
added 2006/11/19 12:0 a.m.17 views

Free online movie crack(latest technologies)-vulnerability warning-the black bar safety net

Actually slightly understand a little web of friends all know to hack movies online is the best way to put pages saved, and then use the page editing software will save the page to open, and then figure out where the url links can be This is obviously a very good way, but also there is no matter...

6.9AI score
Exploits0
Rows per page
Query Builder