Lucene search
+L

105 matches found

Cvelist
Cvelist
•added 2026/07/06 8:34 a.m.•60 views

CVE-2026-24014 Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name t...

0.0069EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/06 8:34 a.m.•56 views

CVE-2026-24014

Apache IoTDB versions 1.3.3 through 2.0.7 are vulnerable to a path traversal vulnerability in the DataNode’s internal RPC interface. When creating Trigger instances, the system fails to sufficiently validate the name of the uploaded Trigger JAR when constructing a file path. If the internal DataN...

9.8CVSS6AI score0.0069EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/07/06 8:34 a.m.•15 views

CVE-2026-24014

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name t...

6AI score0.0069EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•34 views

PT-2026-55880

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 1.3.3 through 2.0.7 Description The internal RPC interface of the Apache IoTDB DataNode used for creating Trigger instances fails to sufficiently validate the name of the uploaded Trigger JAR when constructing a file path...

9.8CVSS6AI score0.0069EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•12 views

EUVD-2025-179391

Malicious code in data-node-sanitize-balance-optimize npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-27626

Malicious code in bioql PyPI...

7.5CVSS5.8AI score0.00849EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/26 2:25 a.m.•41 views

Security Bulletin: IBM QRadar SIEM is vulnerable to possible information disclosure (CVE-2022-22480)

Summary IBM QRadar SIEM is vulnerable to possible information disclosure due to data node rebalancing not functioning correctly. Vulnerability Details CVEID:CVE-2022-22480 DESCRIPTION: IBM QRadar SIEM data node rebalancing does not function correctly when using encrypted hosts which could result ...

7.5CVSS6AI score0.00849EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:49 a.m.•15 views

SUSE CVE-2017-6440

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

5CVSS6.4AI score0.00439EPSS
SaveExploits1References6
CNVD
CNVD
•added 2022/10/10 12:00 a.m.•64 views

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-68281)

IBM QRadar SIEM is a solution from International Business Machines IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

7.5CVSS1.7AI score0.00849EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/07 5:15 p.m.•20 views

CVE-2022-22480

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...

7.5CVSS5.8AI score0.00849EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/07 5:15 p.m.•37 views

CVE-2022-22480

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...

7.5CVSS0.00849EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/07 5:15 p.m.•33 views

Information disclosure

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...

5CVSS7AI score0.00849EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/10/07 5:00 p.m.•45 views

CVE-2022-22480

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...

5.3CVSS7.2AI score0.00849EPSS
SaveExploits0References2
CVE
CVE
•added 2022/10/07 5:00 p.m.•91 views

CVE-2022-22480

IBM QRadar SIEM is vulnerable to information disclosure caused by data node rebalancing not functioning correctly when encrypted hosts are used. Affected versions: QRadar 7.4.0–7.4.3 Fix Pack 6 and 7.5.0–7.5.0 Update Pack 2. Remediation: upgrade to QRadar 7.4.3 Fix Pack 7 and QRadar 7.5.0 Update ...

7.5CVSS7.1AI score0.00849EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/07 12:00 a.m.•3 views

CVE-2022-22480: Undefined Security Weakness

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...

7.5CVSS6.3AI score0.00849EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•21 views

PT-2022-15460 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.4 through 7.5 Description: The issue is related to data node rebalancing in IBM QRadar SIEM when using encrypted hosts, which does not function correctly and could result in information disclosure. Recommendations:...

7.5CVSS5.3AI score0.00849EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/06 12:00 a.m.•17 views

IBM QRadar SIEM 安全漏洞

IBM QRadar SIEM is a solution from International Business Machines IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

7.5CVSS6.3AI score0.00849EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/10/04 12:00 a.m.•13 views

CVE-2022-22480

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...

7.5CVSS6.4AI score0.00849EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/27 12:00 a.m.•43 views

Oracle MySQL Cluster Data Node Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS4.4AI score0.50698EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/28 12:00 a.m.•34 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS2.1AI score0.01651EPSS
SaveExploits0References1
Rows per page
Query Builder