Lucene search
K

12 matches found

Vulnrichment
Vulnrichment
added 2026/03/13 8:50 p.m.1 views

CVE-2026-32628 AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...

7.7CVSS6.2AI score0.00045EPSS
Exploits1References2
CVE
CVE
added 2025/11/10 9:27 a.m.7 views

CVE-2025-12405

CVE-2025-12405 describes an improper privilege management vulnerability in Looker Studio affecting all JDBC-based connectors. The underlying issue: a user with report view access can copy a report and trigger execution of arbitrary SQL on the data source database because stored credentials attach...

7.7CVSS7.2AI score0.00055EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/10 9:27 a.m.2 views

CVE-2025-12405 Unauthorized access through stored credentials in Looker Studio

An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors. A Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored credentials attache...

7.7CVSS7.2AI score0.00055EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/10 9:27 a.m.6 views

CVE-2025-12405 Unauthorized access through stored credentials in Looker Studio

An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors. A Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored credentials attache...

7.7CVSS0.00055EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/06/22 12:0 a.m.2 views

LLM-Based Dynamic Differential Testing for Database Connectors with Reinforcement Learning-Guided Prompt Selection

Database connectors are critical components enabling applications to interact with underlying database management systems DBMS, yet their security vulnerabilities often remain overlooked. Unlike traditional software defects, connector vulnerabilities exhibit subtle behavioral patterns and are...

7.2AI score
Exploits0
RedHat Linux
RedHat Linux
added 2023/11/14 3:43 p.m.31 views

Moderate: Red Hat Security Advisory: python27:2.7 security and bug fix update

An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.1CVSS6.8AI score0.06086EPSS
Exploits1References12
OSV
OSV
added 2023/11/14 12:0 a.m.25 views

ALSA-2023:7042 Moderate: python27:2.7 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

6.1CVSS6.8AI score0.06086EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2023/06/29 12:12 p.m.24 views

Important: Red Hat Security Advisory: python27:2.7 security update

An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

7.5CVSS7AI score0.01445EPSS
Exploits3References2
AlmaLinux
AlmaLinux
added 2023/06/22 12:0 a.m.23 views

Important: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

7.5CVSS7AI score0.01445EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2020/11/05 6:48 p.m.0 views

mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands in MySQL Connectors and other products...

4.7CVSS7.4AI score0.0069EPSS
Exploits0References4
Veracode
Veracode
added 2019/05/02 5:39 a.m.32 views

Sensitive Information Leakage

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 collection provide a stable release of Python 2.7 with a number of additional utilities and database connectors f...

9.8CVSS8.8AI score0.33997EPSS
Exploits15References20Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.33 views

Arbitrary File Read

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 collection provide a stable release of Python 2.7 with a number of additional utilities and database connectors f...

9.8CVSS8.8AI score0.33997EPSS
Exploits15References23Affected Software175
Rows per page
Query Builder