CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

The vulnerability of the Apache Airflow Common SQL Provider software, which is used for creating, monitoring, and orchestrating data processing scripts in Airflow, stems from a lack of security measures regarding SQL query structures. This vulnerability allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Apache Airflow Common SQL Provider software, which is used for creating, monitoring, and orchestrating data processing scenarios, relates to the lack of security measures taken to protect the SQL query structure during the execution of the SQLTableCheckOperator with the...

SQL Injection

Overview apache-airflow-providers-common-sql is a Provider package apache-airflow-providers-common-sql for Apache Airflow Affected versions of this package are vulnerable to SQL Injection via the partitionclause parameter in SQLTableCheckOperator. An attacker can escalate privileges and execute...

CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

SUSE CVE-2023-52942

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in updateparentsubpartscpumask It was found that the check to see if a partition could use up all the cpus from the parent cpuset in updateparentsubpartscpumask was incorrect. As a result, it is...

DEBIAN-CVE-2023-52942

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in updateparentsubpartscpumask It was found that the check to see if a partition could use up all the cpus from the parent cpuset in updateparentsubpartscpumask was incorrect. As a result, it is...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238729...

CVE-2025-0288

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalatio...

CVE-2025-0286

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine...

CVE-2025-0287

Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation...

CVE-2025-0289

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...

CVE-2025-0285

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits...

Linux Distros Unpatched Vulnerability : CVE-2023-34325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code...

Linux Distros Unpatched Vulnerability : CVE-2024-46777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would overflow the 32-bits used for block number. Also refuse to mount...

Linux Distros Unpatched Vulnerability : CVE-2022-34303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to lo...

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition management tools, is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain elevated privileges...

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, allows a hacker to elevate their privileges to a system-level level.

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, is related to access control errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system level...

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, allows attackers to gain increased privileges.

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the memmove function in the BioNTdrv.sys driver of software for working with hard disk partitions in Paragon Partition Manager allows a hacker to gain increased privileges.

The vulnerability of the memmove function in the BioNTdrv.sys driver, a software component used for working with hard disk partitions in Paragon Partition Manager, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased...

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition drives, allows a hacker to execute arbitrary code.

The vulnerability of the BioNTdrv.sys driver, a software component used for working with Paragon Partition Manager partition management tools, is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...