Lucene search
+L

8 matches found

osv_cve
osv_cve
•added 2026/04/16 5:39 p.m.•21 views

CVE-2026-33082 DataEase: SQL Injection in v2 Dataset Export

DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export functionality. The expressionTree parameter in POST /de2api/datasetTree/exportDataset is deserialized into a filtering object and passed to...

8.7CVSS6.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/16 5:39 p.m.•30 views

CVE-2026-33082 DataEase: SQL Injection in v2 Dataset Export

DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export functionality. The expressionTree parameter in POST /de2api/datasetTree/exportDataset is deserialized into a filtering object and passed to...

8.7CVSS6AI score0.00492EPSS
SaveExploits1References2
CVE
CVE
•added 2026/04/16 5:39 p.m.•49 views

CVE-2026-33082

DataEase (open source data visualization tool) has a SQL injection vulnerability in the dataset export feature for versions 2.10.20 and earlier. The issue arises in the POST /de2api/datasetTree/exportDataset flow where expressionTree is deserialized into a filtering object and fed to WhereTree2St...

9.8CVSS6AI score0.00492EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•9 views

CVE-2026-33082: Improper Neutralization of Special Elements used in an SQL Command

DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export functionality. The expressionTree parameter in POST /de2api/datasetTree/exportDataset is deserialized into a filtering object and passed to...

9.8CVSS6AI score0.00492EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•25 views

PT-2026-33351

DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export functionality. The expressionTree parameter in POST /de2api/datasetTree/exportDataset is deserialized into a filtering object and passed to...

8.7CVSS6AI score0.00492EPSS
SaveExploits1References4
OSS-Fuzz
OSS-Fuzz
•added 2024/11/02 2:19 a.m.•17 views

curvesapi:ParseFuzzer: Security exception in com.graphbuilder.math.ExpressionTree.build

Project: https://github.com/virtuald/curvesapi.git Detailed Report: https://oss-fuzz.com/testcase?key=5500605042327552 Project: curvesapi Fuzzing Engine: libFuzzer Fuzz Target: ParseFuzzer Job Type: libfuzzerasancurvesapi Platform Id: linux Crash Type: Security exception Crash Address: Crash Stat...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/07/20 6:21 a.m.•41 views

curvesapi:ParseFuzzer: Security exception in com.graphbuilder.math.ExpressionTree.build

Project: https://github.com/virtuald/curvesapi.git Detailed Report: https://oss-fuzz.com/testcase?key=6151952898326528 Project: curvesapi Fuzzing Engine: libFuzzer Fuzz Target: ParseFuzzer Job Type: libfuzzerasancurvesapi Platform Id: linux Crash Type: Security exception Crash Address: Crash Stat...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/07/19 4:21 a.m.•11 views

curvesapi:ParseFuzzer: Security exception in com.graphbuilder.math.ExpressionTree.build

Project: https://github.com/virtuald/curvesapi.git Detailed Report: https://oss-fuzz.com/testcase?key=5098165223948288 Project: curvesapi Fuzzing Engine: libFuzzer Fuzz Target: ParseFuzzer Job Type: libfuzzerasancurvesapi Platform Id: linux Crash Type: Security exception Crash Address: Crash Stat...

5.9AI score
SaveExploits0
Rows per page
Query Builder