io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-6170...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-5585...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-5585...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-5585...

CVE-2026-15623 Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...

PYSEC-2026-372 Langchain SQL Injection vulnerability

In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain...

EUVD-2026-34917

A server-side request forgery SSRF vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a request whose input is treated as a URL by the server and used to issue an outbound HTTP GET request without URL validation ...

Bold Workplanner Insecure Direct Object Reference Vulnerability (CNVD-2025-24042)

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that stems from the misuse of the Generic Query Web Service, no details of the vulnerability are...

EUVD-2019-8949

Malware in sbrugna...

EUVD-2019-8948

Malware in sbrugna...

EUVD-2019-8950

Malware in sbrugna...

EUVD-2018-8745

Malware in sbrugna...

Kaiten Project Management System SQL Injection

The vulnerability of the Hibernate query service implementation in the Kaiten project management tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of th...

CVE-2019-19327

ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT...

CVE-2019-19329

In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the /kylin/api/xxx/diag endpoint. An attacker can forge requests to internal services by invoking this specific API endpoint on another host. Notes: 1 This is only exploitable if the attacker has...

com.webank.wedatasphere.linkis:linkis-engineplugin-hive (1.0.2), org.apache.hive:hive-pre-upgrade (>=4.0.0-alpha-2, <=4.0.0-beta-1) +3 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.3)

org.apache.hive:hive-exec MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.webank.wedatasphere.linkis:linkis-engineplugin-hive 1.0.2 - org.apache.hive:hive-pre-upgrade...

com.webank.wedatasphere.linkis:linkis-engineplugin-hive (1.0.2), org.apache.hive:hive-llap-client (2.3.3) +5 more potentially affected by CVE-2024-23953 via org.apache.hive:hive-llap-common (2.3.3)

org.apache.hive:hive-llap-common MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-llap-common and may be impacted: - com.webank.wedatasphere.linkis:linkis-engineplugin-hive 1.0.2 - org.apache.hive:hive-llap-clien...

Arbitrary File Read

org.apache.linkis, linkis-metadata-query-service-jdbc is vulnerable to Arbitrary File Read. The vulnerability is due to insufficient parameter filtering in the DataSource Manager Module, allowing an attacker to configure malicious MySQL JDBC parameters to read arbitrary files from the server...