Lucene search
+L

5 matches found

osv_oesa
osv_oesa
•added 2023/12/22 11:06 a.m.•22 views

OESA-2023-1944 hsqldb1 security update

HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small about 100k, fast database engine which offers both in memory and disk based tables. Embedded and server modes are available. Additionally, it includes tools such as...

9.8CVSS9.7AI score0.05145EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 3:23 a.m.•19 views

SUSE CVE-2022-41853

Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can...

8CVSS8.3AI score0.05145EPSS
SaveExploits1References5
osv_ghsa
osv_ghsa
•added 2022/10/06 6:52 p.m.•34 views

GHSA-77XX-RXVH-Q682 HyperSQL DataBase vulnerable to remote code execution when processing untrusted input

Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can...

9.8CVSS7.2AI score0.05145EPSS
SaveExploits1References6
osv_debian
osv_debian
•added 2022/10/06 6:17 p.m.•21 views

DEBIAN-CVE-2022-41853

Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can...

9.8CVSS8.1AI score0.05145EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/10/06 6:17 p.m.•23 views

UBUNTU-CVE-2022-41853

Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can...

9.8CVSS7.3AI score0.05145EPSS
SaveExploits1References4
Rows per page
Query Builder