CVE-2023-35798 Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use getsqlalchemyconnection and someone with access to connection resources...

CVE-2023-34395 Apache Airflow ODBC Provider: Remote code execution vulnerability

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of...

CVE-2023-34395 Apache Airflow ODBC Provider: Remote code execution vulnerability

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of...

CVE-2023-34395

CVE-2023-34395 affects the Apache Airflow ODBC Provider, specifically the OdbcHook component. The vulnerability stems from controllable ODBC driver parameters that allow loading of arbitrary dynamic-link libraries, enabling command execution and a privilege escalation in a local context. The issu...

CVE-2023-34395

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of...

CVE-2023-34395 Apache Airflow ODBC Provider: Remote code execution vulnerability

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of...

CVE-2023-34395: Improper Neutralization of Argument Delimiters in a Command

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of...

CVE-2023-35798: Improper Input Validation

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use getsqlalchemyconnection and someone with access to connection resources...

PT-2023-3656

Name of the Vulnerable Software and Affected Versions Apache Airflow ODBC Provider versions prior to 4.0.0 Apache Airflow MSSQL Provider versions prior to 3.4.1 Description The issue is related to insufficient input validation in the Apache Airflow MSSQL Provider and Airflow ODBC Provider modules...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL

Summary Multiple vulnerabilities in OpenSSL used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the...

pyodbc:fuzz_curs_exec: Crash in libodbc.so.2

Detailed Report: https://oss-fuzz.com/testcase?key=6013200710369280 Project: pyodbc Fuzzing Engine: libFuzzer Fuzz Target: fuzzcursexec Job Type: libfuzzerasanpyodbc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000025aa4 Crash State: libodbc.so.2 SQLDriverConnect Connect...

CVE-2023-32026

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-32027

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...

CVE-2023-29356

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...