RHSA-2024:3313 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2024:1999 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2024:2624 Red Hat Security Advisory: postgresql-jdbc : Security Update

Bulletin has no description...

RHSA-2024:1649 Red Hat Security Advisory: postgresql-jdbc: security update

Bulletin has no description...

RHSA-2024:1436 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2024:1435 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

Apache Druid: Users can provide MySQL JDBC properties not on allow list

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

GHSA-JH66-3545-VPM7 Apache Druid: Users can provide MySQL JDBC properties not on allow list

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

CVE-2024-45537

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

CVE-2024-45537

Apache Druid CVE-2024-45537 describes a vulnerability where an authenticated user can bypass authorization by sending a specially crafted MySQL JDBC connection string that includes properties not on the allow list, enabling access to read data from other databases via JDBC. The issue stems from i...

CVE-2024-45537 Apache Druid: Users can provide MySQL JDBC properties not on allow list

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

CVE-2024-45537 Apache Druid: Users can provide MySQL JDBC properties not on allow list

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

CVE-2024-45537 Apache Druid: Users can provide MySQL JDBC properties not on allow list

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

Apache Druid 输入验证错误漏洞

Apache Druid is an American Apache Apache Foundation open source, column-oriented distributed database written in Java. An input validation error vulnerability exists in Apache Druid version 30.0.0 and earlier. An attacker could exploit this vulnerability to read data from other database systems...

RHSA-2023:2867 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2023:2378 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2023:0318 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

CVE-2024-8862

A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the function getConnectionSafe of the file /dtale/chart-data/1 of the component JDBC Connection Handler. The manipulation of the argument query leads to deserialization. The attack may be...

CVE-2024-8862 h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization

A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the function getConnectionSafe of the file /dtale/chart-data/1 of the component JDBC Connection Handler. The manipulation of the argument query leads to deserialization. The attack may be...

CVE-2024-8862

CVE-2024-8862 affects H2O.ai H2O-3 (v3.46.0.4). A deserialization flaw in getConnectionSafe within the JDBC Connection Handler (/dtale/chart-data/1) is triggered by manipulating the query argument. Remote exploitation is possible and public Exploit details are disclosed. Connected advisories corr...