1456 matches found
PT-2021-1926 · Microsoft · Windows Kernel +1
Name of the Vulnerable Software and Affected Versions: Windows Kernel versions prior to the fixed version Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which can be exploited due to a lack of protection for system data. This vulnerability allo...
Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability
This vulnerability allows local attackers to delete arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within handling of the...
Broadvoice Leak Exposes 350M Records, Personal Voicemail Transcripts
UPDATE Broadvoice, a well-known VoIP provider that serves small- and medium-sized businesses, has leaked more than 350 million customer records related to the company’s “b-hive” cloud-based communications suite. The data includes hundreds of thousands of voicemail transcripts, many involving...
Design/Logic Flaw
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the contents of query description metadata database, the hashed version of the...
CVE-2020-13952
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the contents of query description metadata database, the hashed version of the...
CVE-2020-13952
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the contents of query description metadata database, the hashed version of the...
CVE-2020-13952: Undefined Security Weakness
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the contents of query description metadata database, the hashed version of the...
PT-2020-21498
Name of the Vulnerable Software and Affected Versions blubird version 3.5.0 Description The issue concerns malicious code in the blubird package, which is designed to exploit users' typing mistakes when installing modules. Upon installation, the package attempts to initiate a cryptocurrency miner...
PT-2020-21451
Name of the Vulnerable Software and Affected Versions commander versions affected versions not specified Description The issue concerns malicious code in the commander package, which is designed to exploit users' typing mistakes when installing modules. Upon installation, the package attempts to...
PT-2020-21036
Name of the Vulnerable Software and Affected Versions comander versions affected versions not specified Description The issue concerns malicious code in the comander package, which is designed to exploit users' typing mistakes when installing modules. Upon installation, the package attempts to...
GHSA-HX5G-8HQ2-8X4W SQL Injection in Kylin
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...
CVE-2020-13926
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...
Sql injection
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...
CVE-2020-13926
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...
PT-2020-13785
Name of the Vulnerable Software and Affected Versions Apache Kylin versions 2.0 through 3.0 Description The issue allows for SQL injection attacks due to the concatenation and execution of Hive SQL in Hive CLI or beeline when building a new segment. Some parts of the HQL are from system...
CVE-2020-13926: Improper Neutralization of Special Elements used in an SQL Command
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...
GHSA-C2Q3-4QRH-FM48 vulnerabilities
Vulnerabilities for packages: hive...
GHSA-C265-37VJ-CWCC vulnerabilities
Vulnerabilities for packages: hive...