dbeaver

DBeaver 開発者、SQLプログラマー、データベース管理者、アナリスト向けの無料マルチプラットフォームデータベースツール。 スキーマエディタ、SQLエディタ、データエディタ、AI統合、ER図、データのエクスポート/インポート/マイグレーション、SQL実行計画、データベース管理ツール、データベースダッシュボード、空間データビューア、プロキシ/SSHトンネリング、カスタムデータベースドライバエディタなど、多数の機能を備えています。 標準で100以上のデータベースドライバをサポート。 JDBCまたはODBCドライバを持つあらゆるデータベースをサポート（基本的に、既存のほぼ全てのデータベース...

CVE-2024-36039_PoC

CVE-2024-36039：PyMySQL对象注入导致SQL注入的PoC 一个完整、可复现的CVE-2024-36039 概念验证（PoC）实验室，演示了PyMySQL（版本 = 1.1.0）中的对象注入漏洞如何通过MariaDB的ODBC转义序列升级为完整的SQL注入。 ⚠️ 法律与道德声明（仅供道德使用） 本仓库仅供学术和研究目的 使用。 所提供的代码和技术不得 用于干扰任何您不拥有或未获得明确书面许可进行测试的系统。 作者/贡献者不对 因滥用此信息而导致的任何后果或损害负责。 使用本仓库即表示您同意遵守这些条款。 📖 1. 漏洞概述 CVE-2024-36039 是 PyMySQL...

Linux Distros Unpatched Vulnerability : CVE-2026-18888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When a...

EUVD-2026-67943

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems...

EUVD-2026-67941

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

CVE-2026-81532

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

CVE-2026-81533

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems...

CVE-2026-81533 MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems...

CVE-2026-81533

CVE-2026-81533 is a memory-safety vulnerability in the MongoDB BI Connector ODBC Driver . The root cause is the driver copying an unusually long digit sequence following a LIMIT clause into a fixed-size internal buffer without a length check. The issue is only reachable on connections where the d...

MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems...

CVE-2026-81533 MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems...

CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

CVE-2026-81532

CVE-2026-81532 affects the MongoDB Connector for BI ODBC driver . The root cause is improper bounds checking on a positioned-cursor statement's cursor name : because the name length is not bounded before the driver builds its diagnostic message, an overly long name overwrites memory adjacent to a...

BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

PT-2026-83364

Name of the Vulnerable Software and Affected Versions MongoDB BI Connector ODBC Driver affected versions not specified Description A memory-safety issue exists when the driver processes a SQL statement containing an unusually long sequence of digits following a LIMIT clause. This occurs when the...

PT-2026-83363

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI ODBC driver affected versions not specified Description An issue exists where a user submitting SQL through an application can provide a positioned-cursor statement with a cursor name that exceeds the size of an intern...

CVE-2026-71084

A flaw was found in mysql-connector-odbc. An unauthenticated attacker with local logon access to the infrastructure where MySQL Connectors executes can exploit this vulnerability. This can lead to a complete denial of service DoS by causing the component to crash repeatedly. Additionally, the...

CVE-2026-71079

A flaw was found in MySQL Connector/ODBC. This vulnerability allows a low privileged attacker with network access to cause a complete denial of service DoS by triggering a hang or frequently repeatable crash of the component. The attacker can exploit this flaw through multiple protocols...

DEBIAN-CVE-2026-56705

Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when...