Lucene search
+L

447 matches found

RedhatCVE
RedhatCVE
added 2018/04/06 4:49 a.m.32 views

CVE-2018-1282

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation...

9.1CVSS2.3AI score0.05587EPSS
SaveExploits0References2
OSV
OSV
added 2018/04/05 1:29 p.m.28 views

CVE-2018-1282

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation...

9.1CVSS9.3AI score
SaveExploits0References3
Prion
Prion
added 2018/04/05 1:29 p.m.22 views

Information disclosure

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation...

7.5CVSS9AI score0.05587EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/04/05 1:29 p.m.31 views

CVE-2018-1282

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation...

9.1CVSS9.3AI score0.05587EPSS
SaveExploits0References3
CVE
CVE
added 2018/04/05 1:00 p.m.121 views

CVE-2018-1282

CVE-2018-1282 affects Apache Hive JDBC driver versions 0.7.1 through 2.3.2. The vulnerability arises from an error in the PreparedStatement argument handling, allowing carefully crafted inputs to bypass the driver’s argument escaping/cleanup. Several connected documents corroborate this CVE in th...

9.1CVSS8.9AI score0.05587EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/03/23 12:00 a.m.117 views

IBM DB2 9.7 < FP11 Special Build 37314 / 10.1 < FP6 Special Build 37313 / 10.5 < FP10 / 11.1.3 < FP3 JDBC Driver Unsafe Deserialization Local Privilege Escalation (Windows)

According to its version, the installation of IBM DB2 on the remote Windows host is either 9.7 prior to Fix Pack 11 Special Build 37314, 10.1 prior to Fix Pack 6 Special Build 37313, 10.5 prior to Fix Pack 10 , or 11.1.3 prior to Fix Pack 3. It is, therefore, affected by a local privilege...

7.8CVSS7.5AI score0.00704EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/03/23 12:00 a.m.147 views

IBM DB2 9.7 < FP11 Special Build 37314 / 10.1 < FP6 Special Build 37313 / 10.5 < FP10 Special Build 37311 / 11.1.3 < FP3 JDBC Driver Unsafe Deserialization Local Privilege Escalation (UNIX)

According to its version, the installation of IBM DB2 running on the remote host is either 9.7 prior to Fix Pack 11 Special Build 37314, 10.1 prior to Fix Pack 6 Special Build 37313, 10.5 prior to Fix Pack 10 Special Build 37311, or 11.1.3 prior to Fix Pack 3. It is, therefore, affected by a loca...

7.8CVSS7.5AI score0.00704EPSS
SaveExploits0References3
NVD
NVD
added 2018/03/02 8:29 p.m.29 views

CVE-2017-7434

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles...

9.8CVSS5.4AI score0.00836EPSS
SaveExploits0References2
OSV
OSV
added 2018/03/02 8:29 p.m.7 views

CVE-2017-7434

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles...

9.8CVSS5.8AI score0.00836EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/02 8:29 p.m.26 views

Code injection

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles...

5CVSS9.3AI score0.00836EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/02 8:00 p.m.35 views

CVE-2017-7434 NetIQ Identity Manager JDBC driver could leak passwords in exception traces

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles...

3.3CVSS9.5AI score0.00836EPSS
SaveExploits0References2
CVE
CVE
added 2018/03/02 8:00 p.m.60 views

CVE-2017-7434

CVE-2017-7434 affects the NetIQ Identity Manager JDBC driver prior to 4.6. A vulnerability allows passwords to be logged in exception log files due to sending out incorrect XML configurations. Public details in the sources indicate the issue is documented in NVD and CNVD records, with no explicit...

9.8CVSS6.6AI score0.00836EPSS
SaveExploits0References2Affected Software1
Kitploit
Kitploit
added 2017/09/28 9:13 p.m.59 views

DBeaver - Free Universal DataBase Manager and SQL Client

Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Supports any database which has JDBC driver which basically means - ANY database. EE version also supports non-JDBC datasources WMI, MongoDB, Cassandra, Redis. Has a lot of features including...

7.7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/05/19 12:00 a.m.41 views

Debian DSA-3857-1 : mysql-connector-java - security update

Two vulnerabilities have been found in the MySQL Connector/J JDBC driver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3857. The text itself is copyright C Software in the Public...

6.4CVSS6AI score0.01713EPSS
SaveExploits0References4
Debian
Debian
added 2017/05/18 8:35 p.m.161 views

[SECURITY] [DSA 3857-1] mysql-connector-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3857-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2017 https://www.debian.org/security/faq -...

6.4CVSS6.3AI score0.01713EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/05/18 12:00 a.m.45 views

Debian Security Advisory DSA 3857-1 (mysql-connector-java - security update)

Two vulnerabilities have been found in the MySQL Connector/J JDBC driver. OpenVAS Vulnerability Test $Id: deb3857.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3857-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2017 Greenbone...

5.5CVSS0.01713EPSS
SaveExploits0References1
Debian
Debian
added 2017/05/02 9:05 p.m.76 views

[SECURITY] [DSA 3840-1] mysql-connector-java

------------------------------------------------------------------------- Debian Security Advisory DSA-3840-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 02, 2017 https://www.debian.org/security/faq -...

8.5CVSS8.3AI score0.02877EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/05/02 12:00 a.m.40 views

Debian Security Advisory DSA 3840-1 (mysql-connector-java - security update)

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitrary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...

6CVSS0.3AI score0.02877EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/07/19 12:00 a.m.40 views

Debian DSA-3621-1 : mysql-connector-java - security update

A vulnerability was discovered in mysql-connector-java, a Java database JDBC driver for MySQL, which may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors accessible data. The vulnerability was...

4.9CVSS7.3AI score0.03564EPSS
SaveExploits0References5
Debian
Debian
added 2016/07/18 4:31 p.m.123 views

[SECURITY] [DSA 3621-1] mysql-connector-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3621-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 18, 2016 https://www.debian.org/security/faq -...

4.9CVSS0.9AI score0.03564EPSS
SaveExploits0
Rows per page
Query Builder