Lucene search
+L

100 matches found

NVD
NVD
added 2026/05/27 2:17 p.m.22 views

CVE-2026-6053

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables...

5.5CVSS0.00098EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 1:10 p.m.17 views

CVE-2026-6053

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/05/27 1:10 p.m.29 views

EUVD-2026-32490

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 1:10 p.m.15 views

CVE-2026-6053 IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 1:10 p.m.56 views

CVE-2026-6053 IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables...

5.5CVSS0.00098EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/27 1:10 p.m.39 views

CVE-2026-6053

IBM Db2 is affected by CVE-2026-6053: denial of service when a specially crafted query runs against range-partitioned tables. Affected: Db2 Server 11.5.0–11.5.9 and 12.1.0–12.1.4. CVSS v3.1 base score 5.5 (LOCAL attack, low complexity, high impact on availability). Root cause: CWE-770 (unbounded ...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.32 views

PT-2026-43979

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.4 Description A denial of service can occur when a specially crafted query is executed using range partitioned tables. Recommendations At the moment, there is no...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/21 3:35 p.m.22 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables (CVE-2026-6053)

Summary is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables. Vulnerability Details CVEID:CVE-2026-6053 DESCRIPTION: IBM Db2 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables. CWE:CWE-770:...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/07 3:03 p.m.4 views

CVE-2026-35492 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

6.5CVSS6AI score0.00427EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/07 3:03 p.m.10 views

CVE-2026-35492 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

6.5CVSS6.1AI score
SaveExploits0References5
CVE
CVE
added 2026/04/07 3:03 p.m.66 views

CVE-2026-35492

Kedro-Datasets PartitionedDataset has a path traversal vulnerability prior to 9.3.0, where partition IDs were concatenated with the dataset base path without validation, potentially allowing writing outside the dataset directory on local FS or storage backends (S3, GCS, etc.). The issue affects a...

6.5CVSS6AI score0.00427EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/07 3:03 p.m.7 views

CVE-2026-35492

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

6.5CVSS6AI score0.00427EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/07 3:03 p.m.38 views

CVE-2026-35492 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

6.5CVSS0.00427EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/04/06 5:55 p.m.10 views

Directory Traversal

Overview kedro-datasets is a Kedro-Datasets is where you can find all of Kedro's data connectors. Affected versions of this package are vulnerable to Directory Traversal via the PartitionedDataset component. An attacker can overwrite arbitrary files on the filesystem by supplying partition IDs...

7.1CVSS6.4AI score0.00427EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/04/06 5:55 p.m.14 views

kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write

Impact PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured...

6.5CVSS5.9AI score0.00427EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/04/06 5:55 p.m.6 views

GHSA-CJG8-H5QC-HRJV kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write

Impact PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured...

6.5CVSS5.9AI score0.00427EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.21 views

PT-2026-30759

Name of the Vulnerable Software and Affected Versions Kedro-Datasets versions prior to 9.3.0 Description The Kedro-Datasets plugin is susceptible to a path traversal issue in the PartitionedDataset component. Partition IDs were directly concatenated with the dataset base path without proper...

6.5CVSS6.2AI score0.00427EPSS
SaveExploits0References14
Github Security Blog
Github Security Blog
added 2026/03/20 8:35 p.m.15 views

CRL Distribution Point Scope Check Logic Error in AWS-LC

Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs wi...

5.9AI score
SaveExploits0References5Affected Software2
OSV
OSV
added 2026/03/20 8:35 p.m.12 views

GHSA-9F94-5G5W-GF6R CRL Distribution Point Scope Check Logic Error in AWS-LC

Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs wi...

7.4CVSS5.9AI score0.00252EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/03/20 2:45 p.m.8 views

CVE-2026-4428

A flaw was found in AWS-LC, a cryptographic library. A logic error in how the library validates Certificate Revocation List CRL distribution points can cause legitimate partitioned CRLs to be incorrectly rejected. This allows a revoked certificate to bypass certificate revocation checks,...

9.1CVSS5.6AI score0.00252EPSS
SaveExploits0References5
Rows per page
Query Builder