Lucene search
+L

5 matches found

VulnCheck KEV
VulnCheck KEV
•added 2026/09/10 12:00 a.m.•9 views

VulnCheck KEV: CVE-2026-42031

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information This vulnerability is fixed ...

9.8CVSS6AI score0.02188EPSS
SaveIn wildExploits1References2
Mend
Mend
•added 2026/05/13 6:58 p.m.•1 views

CVE-2026-42032

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to bypass authorization in order to gain access to private resources and PostgreSQL system information This vulnerability...

9.1CVSS0.00408EPSS
SaveExploits0References10
Mend
Mend
•added 2026/05/13 6:52 p.m.•4 views

CVE-2026-42031

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information This vulnerability is fixed ...

9.8CVSS0.02188EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•2 views

CVE-2026-42031: Improper Neutralization of Special Elements used in an SQL Command

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information This vulnerability is fixed ...

9.8CVSS5.8AI score0.02188EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•1 views

CVE-2026-42032: Incorrect Authorization

CKAN is an open-source DMS data management system for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastoresearchsql allowed attackers to bypass authorization in order to gain access to private resources and PostgreSQL system information This vulnerability...

9.1CVSS5.8AI score0.00408EPSS
SaveExploits0References3
Rows per page
Query Builder