Rezultati pretraživanja za 'Od datuma: 24.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-58366 | 8.5 | SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or | 2026-10-27 18:10:00 | 2026-07-18 14:17:09 |
| CVE-2024-58365 | 6.5 | SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a pan | 2026-10-27 18:10:00 | 2026-07-18 14:17:09 |
| CVE-2024-58364 | 6.5 | SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span re | 2026-10-27 18:10:00 | 2026-07-18 14:17:09 |
| CVE-2024-58363 | 6.3 | SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches databases using the USE clause or use method. Attackers with an authenticated session can impersonate an unrelated user in a different database if a user reco | 2026-10-27 18:10:00 | 2026-07-18 14:17:09 |
| CVE-2024-58362 | 8.8 | SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC API without recursively validating it for non-computed values. When a record access method defines a SIGNIN or SIGN | 2026-10-27 18:10:00 | 2026-07-18 14:17:09 |
| CVE-2024-58361 | 6.5 | SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, | 2026-10-27 18:10:00 | 2026-07-18 14:17:08 |
| CVE-2024-58359 | 6.5 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism when using ORDER BY rand() clause. Authorized clients can execute queries with ORDER BY rand() to trigger a panic in the sorting function, crashing the | 2026-10-27 18:10:00 | 2026-07-18 14:17:08 |
| CVE-2024-58358 | 4.9 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles. Attackers can trigger an uncaught panic by signing in with a user assigned an inva | 2026-10-27 18:10:00 | 2026-07-18 14:17:08 |
| CVE-2024-58357 | 6.5 | SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt. Authorized clients can repeatedly invoke rand::time() to reliably trigger | 2026-10-27 18:10:00 | 2026-07-18 14:17:08 |
| CVE-2024-58356 | 6.3 | SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's pe | 2026-10-27 18:10:00 | 2026-07-18 14:17:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12254
Zapisa po stranici: