CVE-2022-30240

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972...

CVE-2022-29972

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

CVE-2022-29971

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...

CVE-2022-29972

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

CVE-2022-30240

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972...

Magnitude Simba Amazon Athena ODBC Driver 参数注入漏洞

Magnitude Simba Amazon Athena ODBC Driver is an ODBC driver from Magnitude, Inc. It is used to connect real-time data from Amazon Athena directly from any application that supports ODBC connections. The Magnitude Simba Amazon Athena ODBC Driver has a parameter injection vulnerability that stems...

PT-2022-19935

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena ODBC Driver versions 1.1.1 through 1.1.x before 1.1.17 Description An argument injection vulnerability in the browser-based authentication component may allow a local user to execute arbitrary code. Recommendation...

CVE-2022-30239: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971...

CVE-2022-30240: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972...

PT-2022-20028

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena JDBC Driver versions 2.0.25 through 2.0.28 Description An argument injection issue in the browser-based authentication component may allow a local user to execute code. Recommendations For Magnitude Simba Amazon...

PT-2022-20030

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Redshift JDBC Driver versions 1.2.40 through 1.2.55 Description The issue is related to an argument injection vulnerability in the browser-based authentication component. This may allow a local user to execute code...

CVE-2022-29971: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...

CVE-2022-29972: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver 1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52 may allow a local user to execute arbitrary code...

PT-2022-2477

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Redshift ODBC Driver versions 1.4.14 through 1.4.21.1001 Magnitude Simba Amazon Redshift ODBC Driver versions 1.4.22 through 1.4.x before 1.4.52 Microsoft Azure Synapse affected versions not specified Microsoft Azure Dat...