Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 3:02 p.m.•14 views

CVE-2026-32939

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

8.1CVSS5.8AI score0.00625EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/20 4:16 a.m.•20 views

CVE-2026-32939

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

8.1CVSS0.00625EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/03/20 3:27 a.m.•7 views

CVE-2026-32939

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

7.7CVSS5.8AI score0.00625EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/20 3:27 a.m.•6 views

CVE-2026-32939 DataEase is Vulnerable to H2 JDBC RCE Bypass

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

7.7CVSS5.8AI score0.00625EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/20 3:27 a.m.•41 views

CVE-2026-32939

DataEase (open-source data visualization tool) versions 2.10.19 and earlier suffer a locale-related input validation bug in JDBC URL handling. DataEase uses String.toUpperCase() without an explicit Locale, making its security checks depend on the JVM’s default locale, while H2 JDBC normalizes URL...

8.1CVSS5.8AI score0.00625EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/03/20 3:27 a.m.•15 views

EUVD-2026-13525

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

7.7CVSS5.8AI score0.00625EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/20 3:27 a.m.•39 views

CVE-2026-32939 DataEase is Vulnerable to H2 JDBC RCE Bypass

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

7.7CVSS0.00625EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/03/20 12:00 a.m.•54 views

PT-2026-26550

Name of the Vulnerable Software and Affected Versions DataEase versions 2.10.19 and below Description DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below exhibit inconsistent locale handling between the JDBC URL validation logic and the H2 JDBC engine's interna...

8.1CVSS5.7AI score0.00625EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/20 12:00 a.m.•1 views

CVE-2026-32939: Improper Handling of Case Sensitivity

DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL validation logic and the H2 JDBC engine's internal parsing. DataEase uses String.toUpperCase without specifying an explicit Locale, causing its security...

8.1CVSS5.8AI score0.00625EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•56 views

Oracle: Security Advisory (ELSA-2013-1582)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS7.4AI score0.05347EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2013/11/26 12:00 a.m.•55 views

python security, bug fix, and enhancement update

2.6.6-51 - Fixed memory leak in ssl.getpeeraltnames Resolves: rhbz1002983 2.6.6-50 - Added fix for CVE-2013-4238 Resolves: rhbz998784 2.6.6-49 - Fix shebangs in several files in python-tools subpackage Resolves: rhbz521898 2.6.6-48 - Fix sqlite3.Cursor.lastrowid under a Turkish locale. Resolves:...

4.3CVSS7AI score0.05347EPSS
SaveExploits1
Rows per page
Query Builder