Lucene search
Ubuntu.comUB:CVE-2012-0805HistoryJun 05, 2012 - 12:00 a.m.
CVE-2012-0805
2012-06-0500:00:00
ubuntu.com
ubuntu.com
11
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.5%
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as
used in Keystone, allow remote attackers to execute arbitrary SQL commands
via the (1) limit or (2) offset keyword to the select function, or
unspecified vectors to the (3) select.limit or (4) select.offset function.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | Keystone on 11.10 is a pre-release version and unusable with other components such as nova and horizon |
Related
redhat
redhat
(RHSA-2012:0369) Moderate: python-sqlalchemy security update
2012-03-07 00:00:00
nessus
nessus
Fedora 16 : python-sqlalchemy0.5-0.5.8-9.fc16 (2012-3412)
2012-04-02 00:00:00
Oracle Linux 6 : python-sqlalchemy (ELSA-2012-0369)
2013-07-12 00:00:00
CentOS 6 : python-sqlalchemy (CESA-2012:0369)
2012-03-08 00:00:00
openvas
openvas
Mandriva Update for python-sqlalchemy MDVSA-2012:059 (python-sqlalchemy)
2012-08-03 00:00:00
Oracle: Security Advisory (ELSA-2012-0369)
2015-10-06 00:00:00
Fedora Update for python-sqlalchemy0.5 FEDORA-2012-3412
2012-04-02 00:00:00
seebug
seebug
SQLAlchemy 'limit'和'offset'参数SQL注入漏洞
2012-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: python-sqlalchemy0.5-0.5.8-9.fc15
2012-04-01 22:57:47
[SECURITY] Fedora 17 Update: python-sqlalchemy0.5-0.5.8-9.fc17
2012-04-12 03:06:42
[SECURITY] Fedora 16 Update: python-sqlalchemy0.5-0.5.8-9.fc16
2012-04-01 22:57:08
prion
prion
Sql injection
2012-06-05 22:55:00
cve
cve
CVE-2012-0805
2012-06-05 22:55:08
oraclelinux
oraclelinux
python-sqlalchemy security update
2012-03-07 00:00:00
cvelist
cvelist
CVE-2012-0805
2012-06-05 22:00:00
securityvulns
securityvulns
SQLAlchemy SQL injection
2012-04-19 00:00:00
[ MDVSA-2012:059 ] python-sqlalchemy
2012-04-19 00:00:00
nvd
nvd
CVE-2012-0805
2012-06-05 22:55:08
github
github
SQLAlchemy vulnerable to SQL injection
2022-05-14 03:49:27
gentoo
gentoo
SQLAlchemy: SQL injection
2012-09-26 00:00:00
centos
centos
python security update
2012-03-07 20:40:28
debian
debian
[SECURITY] [DSA 2449-1] sqlalchemy security update
2012-04-12 05:17:23
debiancve
debiancve
CVE-2012-0805
2012-06-05 22:55:08
veracode
veracode
SQL Injection
2020-04-10 01:07:44
osv
osv
PYSEC-2012-9
2012-06-05 22:55:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.5%
Related for UB:CVE-2012-0805