CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBCドライバーのリモートコード実行（RCE） The Amazon JDBC Driver for Redshift は、Java Platform, Enterprise Editionsで利用可能な標準JDBCアプリケーションプログラムインターフェース（API）を通じてデータベース接続を提供するType 4 JDBCドライバーです。このドライバーは、任意のJavaアプリケーション、アプリケーションサーバー、またはJava対応アプレットからRedshiftへのアクセスを提供します。 redshift-jdbc42...

jdbc-sqlxml-xxe

jdbc-sqlxml-xxe h2-jdbc CVE-2021-23463 https://github.com/h2database/h2database/issues/3195 SQLXML XXE 취약점 재현. mysql-jdbc CVE-2021-2471 SQLXML XXE 취약점 재현...

dbeaver

DBeaver 개발자, SQL 프로그래머, 데이터베이스 관리자 및 분석가를 위한 무료 멀티 플랫폼 데이터베이스 도구입니다. 스키마 편집기, SQL 편집기, 데이터 편집기, AI 통합, ER 다이어그램, 데이터 내보내기/가져오기/마이그레이션, SQL 실행 계획, 데이터베이스 관리 도구, 데이터베이스 대시보드, 공간 데이터 뷰어, 프록시 및 SSH 터널링, 사용자 정의 데이터베이스 드라이버 편집기 등 다양한 기능을 제공합니다. 기본적으로 100개 이상의 데이터베이스 드라이버를 지원합니다. JDBC 또는 ODBC 드라이버가 있는 모...

progress-burp

Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...

hekate

Hekate - VMWare Workspace ONE Access リモートコード実行エクスプロイト Qihoo 360 Vulnerability Research Institute の Steven Seeley LandGrey によるオリジナルの悪意のある MySQL サーバー 詳細 Hekate は heh-ka-teh と発音されます Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File: identity-manager-21.08.0.1-19010796OVF10.ova File...

CVE-2026-107315

A flaw was found in the PostgreSQL JDBC Driver pgjdbc. When an application transmits a value shorter than its declared length, the driver pads the remaining data with residual bytes from its internal send buffer instead of zero bytes. An attacker who can induce the application to store and...

CVE-2026-107314

A flaw was found in the PostgreSQL JDBC Driver pgjdbc, which may lead to information disclosure. When the requireAuth connection property is configured to exclude all supported authentication mechanisms or lacks a valid method, the driver fails to enforce authentication restrictions and accepts a...

CLEANSTART-2026-MW74031 Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network

Security vulnerability affects the apache-hive package. Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

CLEANSTART-2026-DW89349 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE

Security vulnerability affects the apache-hive package. pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE...

DEBIAN-CVE-2026-107315

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107315

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

DEBIAN-CVE-2026-107314

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the driver knows, for example requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none. The driver then accepts any method...

CVE-2026-107314

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the driver knows, for example requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none. The driver then accepts any method...

EUVD-2026-94650

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107315

The pgjdbc (PostgreSQL JDBC Driver) versions 42.7.4 through 42.7.13 are vulnerable to an information disclosure issue where values shorter than their declared length are padded with leftover bytes from the send buffer instead of zeros. This buffer contains fragments of previous messages, includin...

CVE-2026-107315

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107315 pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107315 pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107314 pgjdbc does not enforce requireAuth when the value excludes every authentication method

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the driver knows, for example requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none. The driver then accepts any method...

CVE-2026-107314

The pgjdbc PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 , contains a vulnerability where the requireAuth connection property fails to enforce restrictions if all six known authentication methods are excluded (e.g., requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none). In these ...