mariadb-10.6-test

4 results · Feed

• Critical 10.0
  CVE-2024-1597

  pgjdbc SQL Injection via line comment generation

  pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There mu…

  pgjdbc pgjdbc trino trino-plugin-opensearch Debian Ubuntu Alpine Wolfi Maven
  Feb 19, 2024
• High 7.1
  CVE-2022-31197

  SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc

  PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column n…

  pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Wolfi Maven
  Aug 3, 2022
• High 7.0
  CVE-2022-21724

  Unchecked Class Instantiation when providing Plugin Classes

  pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc…

  libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven
  Feb 2, 2022
• High 7.7
  CVE-2020-13692

  Improper Restriction of XML External Entity Reference

  PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

  libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven
  Jun 4, 2020