Lucene search
+L

366 matches found

CNNVD
CNNVD
added 2020/11/19 12:0 a.m.18 views

Red Hat Hibernate ORM SQL Injection Vulnerability

Red Hat Hibernate ORM is an object/relational mapping ORM framework for writing applications from Red Hat. Hibernate ORM suffers from a SQL injection vulnerability that can be exploited by an attacker to read or modify data via annotations in Hibernate ORM using SQL injection...

7.4CVSS7.2AI score0.02894EPSS
SaveExploits0References42
RedHat Linux
RedHat Linux
added 2020/11/05 6:48 p.m.9 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/11/05 6:47 p.m.7 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/10/14 11:16 a.m.10 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
Fedora
Fedora
added 2020/10/05 12:18 a.m.72 views

[SECURITY] Fedora 33 Update: rubygem-activerecord-6.0.3.3-1.fc33

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

6.5CVSS1.4AI score0.02372EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/10/05 12:0 a.m.28 views

Fedora: Security Advisory for rubygem-activerecord (FEDORA-2020-4dd34860a3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/09/07 1:5 p.m.9 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/09/07 12:58 p.m.8 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/09/07 12:57 p.m.8 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/08/31 3:40 p.m.9 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
Veracode
Veracode
added 2020/08/18 2:3 a.m.40 views

SQL Injection

hibernate-core is vulnerable to SQL injection. The vulnerability exists in Hibernate ORM...

6.5CVSS1.6AI score0.02126EPSS
SaveExploits0References30Affected Software30
RedHat Linux
RedHat Linux
added 2020/08/17 1:28 p.m.9 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/08/17 1:25 p.m.6 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/07/07 12:0 a.m.10 views

Red Hat Hibernate ORM SQL Injection Vulnerability

Red Hat Hibernate ORM is the United States Red Hat Red Hat, Inc. used to write applications for object/relational mapping ORM framework. JPA Criteria API is one of the query function for the API application programming interface. An SQL injection vulnerability exists in the implementation of the...

6.5CVSS9.6AI score0.02126EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/06 7:15 p.m.31 views

CVE-2019-14900

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access...

6.5CVSS7.4AI score
SaveExploits0References3
NVD
NVD
added 2020/07/06 7:15 p.m.17 views

CVE-2019-14900

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access...

6.5CVSS0.02126EPSS
SaveExploits0References3
Prion
Prion
added 2020/07/06 7:15 p.m.29 views

Sql injection

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access...

4CVSS8AI score0.02126EPSS
SaveExploits0References3Affected Software7
CVE
CVE
added 2020/07/06 6:35 p.m.312 views

CVE-2019-14900

CVE-2019-14900 affects Hibernate ORM prior to 5.3.18, 5.4.18, and 5.5.0.Beta1. The flaw is a SQL injection in the JPA Criteria API implementation that can permit unsanitized literals in the SELECT or GROUP BY clauses, enabling an attacker to access unauthorized information. The connected document...

6.5CVSS6.7AI score0.02126EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/07/06 6:35 p.m.41 views

CVE-2019-14900

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access...

7.5AI score0.02126EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/07/06 6:35 p.m.70 views

CVE-2019-14900

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access...

6.5CVSS6.8AI score0.02126EPSS
SaveExploits0
Rows per page
Query Builder