Published: 11/04/2018 Updated: 11/04/2024

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 580

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

H2 1.4.197, as used in Datomic prior to 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is "h2 is not designed to be run outside of a secure environment."

Vulnerable Product	Search on Vulmon	Subscribe to Product
h2database h2 1.4.197
cognitect datomic

Multiple vulnerabilities have been found in Hitachi Ops Center Analyzer viewpoint CVE-2018-10054, CVE-2018-14335, CVE-2018-20200, CVE-2019-10086, CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, CVE-2019-14439, CVE-2019-14540, CVE-2019-14892, CVE-2019-14893, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943, CVE-2019-17267, CVE-2019- ...

Examples of Usage for Sonatype Scan Gradle Plugin This a demo repository showing how to use the Scan Gradle Plugin to analyze open source dependencies in Gradle projects A dependency with vulnerabilities was added to show how the output looks like The file buildgradle has a simple Gradle setup applying the plugin For more options to configure (including usage with credentia

Listado de fotos por álbum

Introducción Microservicio en SpringBoot con 3 endpoints: albums-and-photos/db?useType=[arrayList|treeSet] -> Elimina la información que hubiera en memoria Realiza una carga de datos de la web Devuelve la lista de álbumes junto con las fotos que contiene a partir de la información almacenada en base de datos El parámetro useType es

CWE-20 https://www.exploit-db.com/exploits/44422/https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html https://forum.datomic.com/t/important-security-update-0-9-5697/379 http://blog.datomic.com/2018/03/important-security-update.html https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E https://github.com/h2database/h2database/issues/1225 https://github.com/h2database/h2database/issues/3099 https://github.com/h2database/h2database/issues/1808#issuecomment-599203115 https://nvd.nist.gov https://github.com/guillermo-varela/example-scan-gradle-plugin https://github.com/victorsempere/albums_and_photos https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-109/index.html

CVE-2018-10054

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect