4 matches found
Remote Code Execution (RCE)
pgadmin4 is vulnerable to remote code execution. The vulnerability exists in validatebinarypath function of init.py due to lack of validation of the binary path which allows an attacker to inject and execute malicious query parameters via the pgAdmin server...
Remote Code Execution (RCE)
sysstat is vulnerable to remote code execution. The vulnerability exists in allocatestructures function of sacommon.c due to insufficiently checks bounds before arithmetic multiplication which allows an attacker to inject and execute malicious query parameters...
Remote Code Execution (RCE)
quarkus-vertx-http is vulnerable to remote code execution. The vulnerability exists in multiple functions due to drive-by localhost attacks which allows an attacker to inject and execute malicious query parameters via the Dev UI Config Editor...
Remote Code Execution (RCE)
linkis-entrance is vulnerable to remote code execution. The vulnerability exists in the onProgressUpdate function of QueryPersistenceManager.java, allowing an attacker to inject and execute malicious query parameters when an attacker has write access to the database and configures a JDBC EC with ...