Lucene search
+L

47 matches found

Vulnrichment
Vulnrichment
•added 2023/06/29 9:41 a.m.•19 views

CVE-2023-22886 Apache Airflow JDBC Provider: RCE Vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s Connection URL parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission...

8.7AI score0.01518EPSS
SaveExploits0References1
Mend
Mend
•added 2023/06/29 9:41 a.m.•1 views

CVE-2023-22886

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s Connection URL parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission...

8.8CVSS0.01518EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/29 12:00 a.m.•5 views

CVE-2023-22886: Improper Input Validation

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s Connection URL parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission...

8.8CVSS7.8AI score0.01518EPSS
SaveExploits0References2
OSV
OSV
•added 2021/04/05 7:15 p.m.•17 views

CVE-2021-24164

In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connecti...

4.3CVSS5.8AI score0.00889EPSS
SaveExploits2References2
NVD
NVD
•added 2021/04/05 7:15 p.m.•39 views

CVE-2021-24164

In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connecti...

4.3CVSS0.00889EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/04/05 7:15 p.m.•10 views

CVE-2021-24164

In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connecti...

4.3CVSS5.9AI score0.00889EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/04/05 12:00 a.m.•20 views

WordPress Ninja Forms Contact Form 信息泄露漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the Ninja Forms Contact Form WordPress plugin befo...

4.3CVSS5.1AI score0.00889EPSS
SaveExploits2References3
Rows per page
Query Builder