CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

osv_ubuntu•added 2019/08/15 6:15 p.m.•78 views

UBUNTU-CVE-2018-14668

In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "defaultdatabase" fields which led to Cross Protocol Request Forgery Attacks...

8.8CVSS5.9AI score0.00716EPSS

SaveExploits0References3

Mend•added 2019/08/15 5:31 p.m.•12 views

CVE-2018-14668

In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "defaultdatabase" fields which led to Cross Protocol Request Forgery Attacks...

8.8CVSS0.00716EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2019/08/15 12:00 a.m.•15 views

CVE-2018-14668: Cross-Site Request Forgery (CSRF)

In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "defaultdatabase" fields which led to Cross Protocol Request Forgery Attacks...

8.8CVSS5.9AI score0.00716EPSS

SaveExploits0References2

ClickHouse•added 2018/06/28 12:00 a.m.•33 views

CVE-2018-14668

“remote” table function allowed arbitrary symbols in “user”, “password” and “defaultdatabase” fields which led to Cross Protocol Request Forgery Attacks. Andrey Krasichkov of Yandex Information Security Team...

8.8CVSS7.3AI score0.00716EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by