24 February 2023

7 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-25696

  Apache Airflow Hive Provider Beeline RCE

  Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

  Apache Software Foundation Apache Airflow Hive Provider apache-airflow-providers-apache-hive PyPI
  Feb 24, 2023
• Critical 9.8
  CVE-2023-25693

  Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

  Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.

  Apache Software Foundation Apache Airflow Sqoop Provider apache-airflow apache-airflow-providers-apache-sqoop PyPI
  Feb 24, 2023
• Critical 9.8
  CVE-2023-25691

  Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution

  Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

  Apache Software Foundation Apache Airflow Google provider apache-airflow-providers-google PyPI
  Feb 24, 2023
• Critical 9.8
  CVE-2021-4105

  Unauthenticated Remote Code Execution on COSLAT Firewall

  Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.

  BG-TEK COSLAT Firewall
  Feb 24, 2023
• Critical 9.8
  CVE-2023-24189

  An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a c…

  Feb 24, 2023
• Critical 9.6
  CVE-2021-33387

  Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get reques…

  Feb 24, 2023
• Critical 9.8
  CVE-2021-35370

  An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

  Feb 24, 2023