Lucene search
K

4 matches found

RedHat Linux
RedHat Linux
added 2022/11/03 3:14 p.m.4 views

h2: Remote Code Execution in Console

A flaw was found in h2. The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. This flaw allows an attacker to use this URL to send another server’s code, causing remote code execution. This issue is exploited...

10CVSS7.4AI score0.90592EPSS
Exploits3References5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.0 views

The vulnerability of the `org.h2.util.JdbcUtils.getConnection` method in the H2 database management system allows a hacker to execute arbitrary code.

The vulnerability of the org.h2.util.JdbcUtils.getConnection method in the H2 database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

10CVSS0.90592EPSS
Exploits3References3Affected Software1
CNVD
CNVD
added 2022/01/11 12:0 a.m.157 views

H2 database code issue vulnerability

H2 database is an embeddable Rdbms written in Java . A code issue vulnerability exists in H2 database, which stems from the H2 database's getConnection method taking the driver's class name and the database's URL as parameters, which can be exploited by an attacker to pass the name of the JNDI...

10CVSS9.5AI score0.90592EPSS
Exploits3References1
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.6 views

H2database代码问题漏洞

H2 database is an embeddable Rdbms written in Java . A code issue vulnerability exists in H2 database, which stems from the H2 database's getConnection method taking the driver's class name and the database's URL as parameters, which can be exploited by an attacker to pass the name of the JNDI...

10CVSS8.4AI score0.90592EPSS
Exploits3References24
Rows per page
Query Builder