Lucene search
K

21 matches found

NVD
NVD
added 2025/10/29 4:15 p.m.2 views

CVE-2025-60542

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false...

6.5CVSS0.00042EPSS
Exploits0References4
Spring Engineering
Spring Engineering
added 2024/03/20 12:0 a.m.7 views

Spring Tips: the Exposed ORM for Kotlin

Hi, Spring fans! In this installment we look at the Exposed Object Relational Mapper framework for Kotlin. Kotlin Java JDBC springboot...

7.3AI score
Exploits0
OSV
OSV
added 2023/11/14 6:27 p.m.33 views

GHSA-6HJJ-GQ77-J4QW Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task

Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2post0 and was tested on version 1.8.2. Overview In all current versions of Label Studio, the application allow...

7.5CVSS7.5AI score0.70644EPSS
Exploits3References5
Github Security Blog
Github Security Blog
added 2023/11/14 6:27 p.m.34 views

Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task

Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2post0 and was tested on version 1.8.2. Overview In all current versions of Label Studio, the application allow...

7.5CVSS7AI score0.70644EPSS
Exploits3References5Affected Software1
OSV
OSV
added 2023/11/13 9:15 p.m.8 views

PYSEC-2023-275

Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on t...

7.5CVSS7.4AI score0.70644EPSS
Exploits3References2
Cvelist
Cvelist
added 2023/11/13 8:13 p.m.14 views

CVE-2023-47117 Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio

Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on t...

7.5CVSS7.7AI score0.70644EPSS
Exploits3References2
OSV
OSV
added 2023/11/13 8:13 p.m.23 views

CVE-2023-47117 Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio

Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on t...

7.5CVSS6.5AI score0.70644EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2019/05/07 4:20 a.m.39 views

Moderate: Red Hat Security Advisory: python36:3.6 security update

An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.3AI score0.0189EPSS
Exploits3References3
OSV
OSV
added 2019/05/07 3:40 a.m.25 views

RLSA-2019:0984 Moderate: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. SQLAlchemy is an...

7.3CVSS9.2AI score0.0189EPSS
Exploits3References3
Rockylinux
Rockylinux
added 2019/05/07 3:40 a.m.34 views

python27:2.7 security update

An update is available for python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy,...

9.8CVSS1.2AI score0.08764EPSS
Exploits3
Fedora
Fedora
added 2016/07/19 10:26 p.m.23 views

[SECURITY] Fedora 23 Update: php-doctrine-orm-2.4.8-1.fc23

Object relational mapper ORM for PHP that sits on top of a powerful datab ase abstraction layer DBAL. One of its' key features is the option to write database queries in a proprietary object oriented SQL dialect called Doctri ne Query Language DQL, inspired by Hibernate's HQL. This provides...

7.8CVSS1.3AI score0.00033EPSS
Exploits0
Fedora
Fedora
added 2014/06/17 11:36 p.m.34 views

[SECURITY] Fedora 19 Update: php-doctrine-orm-2.4.2-2.fc19

Object relational mapper ORM for PHP that sits on top of a powerful datab ase abstraction layer DBAL. One of its' key features is the option to write database queries in a proprietary object oriented SQL dialect called Doctri ne Query Language DQL, inspired by Hibernate's HQL. This provides...

5CVSS1AI score0.2611EPSS
Exploits0
Fedora
Fedora
added 2014/06/17 11:31 p.m.35 views

[SECURITY] Fedora 20 Update: php-doctrine-orm-2.4.2-2.fc20

Object relational mapper ORM for PHP that sits on top of a powerful datab ase abstraction layer DBAL. One of its' key features is the option to write database queries in a proprietary object oriented SQL dialect called Doctri ne Query Language DQL, inspired by Hibernate's HQL. This provides...

5CVSS1AI score0.2611EPSS
Exploits0
Gentoo Linux
Gentoo Linux
added 2012/09/26 12:0 a.m.32 views

SQLAlchemy: SQL injection

Background SQLAlchemy is a Python SQL toolkit and Object Relational Mapper. Description SQLAlchemy does not properly sanitize input passed from the “limit” and “offset” keywords to the select function before using it in an SQL query. Impact A remote attacker could exploit this vulnerability to...

7.5CVSS7.2AI score0.01649EPSS
Exploits2
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.18 views

Fedora Update for python-sqlalchemy0.5 FEDORA-2012-3373

Check for the Version of python-sqlalchemy0.5 OpenVAS Vulnerability Test Fedora Update for python-sqlalchemy0.5 FEDORA-2012-3373 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

7.5CVSS6.3AI score0.01649EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.15 views

CentOS Update for python-sqlalchemy CESA-2012:0369 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS5.2AI score0.01649EPSS
Exploits2References2
Fedora
Fedora
added 2012/04/12 3:6 a.m.14 views

[SECURITY] Fedora 17 Update: python-sqlalchemy0.5-0.5.8-9.fc17

SQLAlchemy is an Object Relational Mappper ORM that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manu all...

7.5CVSS1.3AI score0.01649EPSS
Exploits2
Fedora
Fedora
added 2012/04/01 10:57 p.m.14 views

[SECURITY] Fedora 15 Update: python-sqlalchemy0.5-0.5.8-9.fc15

SQLAlchemy is an Object Relational Mappper ORM that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manu all...

7.5CVSS1.3AI score0.01649EPSS
Exploits2
Fedora
Fedora
added 2012/04/01 10:57 p.m.22 views

[SECURITY] Fedora 16 Update: python-sqlalchemy0.5-0.5.8-9.fc16

SQLAlchemy is an Object Relational Mappper ORM that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manu all...

7.5CVSS1.3AI score0.01649EPSS
Exploits2
OpenVAS
OpenVAS
added 2011/04/06 12:0 a.m.11 views

Fedora Update for php-doctrine-Doctrine FEDORA-2011-4098

Check for the Version of php-doctrine-Doctrine OpenVAS Vulnerability Test Fedora Update for php-doctrine-Doctrine FEDORA-2011-4098 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

7.4AI score
Exploits0References2
Rows per page
Query Builder