Lucene search
+L

577 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•4 views

CVE-2026-5485: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To...

7.8CVSS6.5AI score0.01146EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•3 views

CVE-2026-35559: Out-of-bounds Write

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0...

7.1CVSS5.9AI score0.00508EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•4 views

CVE-2026-35558: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that are processed by the driver during...

7.8CVSS6.6AI score0.00331EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/03 12:00 a.m.•22 views

Amazon Athena ODBC driver 安全漏洞

The Amazon Athena ODBC driver is a database connection driver developed by the American company Amazon. Versions of the Amazon Athena ODBC driver prior to 2.0.5.1 contained security vulnerabilities. These vulnerabilities stemmed from the browser-based authentication component’s ability to execute...

7.8CVSS6.1AI score0.01146EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•4 views

CVE-2026-35562: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations. To remediate this...

8.7CVSS5.9AI score0.00684EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•3 views

CVE-2026-35560: Improper Certificate Validation

Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. Thi...

9.1CVSS5.9AI score0.00365EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•3 views

CVE-2026-35561: Missing Authorization

Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediat...

9.8CVSS5.9AI score0.00736EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•21 views

PT-2025-46181

Name of the Vulnerable Software and Affected Versions AWS JDBC Wrapper versions prior to 2.6.5 AWS Go Wrapper versions prior to 2025-10-17 AWS NodeJS Wrapper versions prior to 2.0.1 AWS Python Wrapper versions prior to 1.4.0 AWS PGSQL ODBC driver versions prior to 1.0.1 Description An issue in AW...

8.6CVSS5.9AI score0.00452EPSS
SaveExploits0References33
NVD
NVD
•added 2025/10/23 9:15 p.m.•23 views

CVE-2025-12100

Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6...

8.8CVSS0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/23 9:02 p.m.•22 views

CVE-2025-12100 MongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6...

8.8CVSS0.00165EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/23 1:15 a.m.•29 views

CVE-2025-11575

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS0.00134EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/23 12:00 a.m.•1 views

CVE-2025-12100: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6...

8.8CVSS5.8AI score0.00165EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/23 12:00 a.m.•2 views

CVE-2025-11575: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS5.8AI score0.00134EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2025/10/09 2:14 p.m.•29 views

MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS7.6AI score0.00134EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2019-12438

Malware in sbrugna...

7.5CVSS7.7AI score0.0123EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2006-3698

Malware in sbrugna...

10CVSS6.4AI score0.04072EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2012-3111

Malware in sbrugna...

6.8CVSS6.4AI score0.01095EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2012-2167

Malware in sbrugna...

5CVSS6.4AI score0.01173EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-14273

Malware in sbrugna...

9.8CVSS7.6AI score0.01763EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2004-0546

Malware in sbrugna...

5CVSS6.4AI score0.02674EPSS
SaveExploits0References6
Rows per page
Query Builder